af8da8d60cd356ada2823c67da7472d8a869d64bcadd14c9a13bf8181f3f97c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af8da8d60cd356ada2823c67da7472d8a869d64bcadd14c9a13bf8181f3f97c3
Size

3.0MB
Sample

231010-1x5mtaga92
MD5

bb564847c392d703f2db5d3497d93147
SHA1

ffac5f460093d3bd004ccc46487fde75880c256b
SHA256

af8da8d60cd356ada2823c67da7472d8a869d64bcadd14c9a13bf8181f3f97c3
SHA512

d3b88ed715e123aed29c39eb9a3654c84c2ba3b0d7af227b5b1be817a2c4d8f1dd277e5f9f03538396f0841839e8f5387ea81a16be296f7ed06bf4ee5df012da
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl/z4y1tO4dswqH4zP1fQ8f:Q+8X9G3vP3AMtz4yrbC4z9fQ+

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  af8da8d60cd356ada2823c67da7472d8a869d64bcadd14c9a13bf8181f3f97c3
- Size
  
  3.0MB
- MD5
  
  bb564847c392d703f2db5d3497d93147
- SHA1
  
  ffac5f460093d3bd004ccc46487fde75880c256b
- SHA256
  
  af8da8d60cd356ada2823c67da7472d8a869d64bcadd14c9a13bf8181f3f97c3
- SHA512
  
  d3b88ed715e123aed29c39eb9a3654c84c2ba3b0d7af227b5b1be817a2c4d8f1dd277e5f9f03538396f0841839e8f5387ea81a16be296f7ed06bf4ee5df012da
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl/z4y1tO4dswqH4zP1fQ8f:Q+8X9G3vP3AMtz4yrbC4z9fQ+
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2