396e173267696518890a44ba488f5d83f125ce030ec1a5f919d4f180c6d28adf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

396e173267696518890a44ba488f5d83f125ce030ec1a5f919d4f180c6d28adf
Size

3.3MB
Sample

231011-2d7thage2z
MD5

7094f560acdb406878245228cdbefd45
SHA1

58f958e36f8fe47a151bf9fcde98080ea8a1a8f2
SHA256

396e173267696518890a44ba488f5d83f125ce030ec1a5f919d4f180c6d28adf
SHA512

cc7bf26e814ca00453a4a474a7b751e690e5aa2113afde5e13ec9cebb0b87d0c32a3128a96fea2bd19df9e50ee4ff0178532f8fb48788eea2be6acc0900ccede
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlJe/vevkMYingP5upm:Q+8X9G3vP3AMOevgygP5upm

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  396e173267696518890a44ba488f5d83f125ce030ec1a5f919d4f180c6d28adf
- Size
  
  3.3MB
- MD5
  
  7094f560acdb406878245228cdbefd45
- SHA1
  
  58f958e36f8fe47a151bf9fcde98080ea8a1a8f2
- SHA256
  
  396e173267696518890a44ba488f5d83f125ce030ec1a5f919d4f180c6d28adf
- SHA512
  
  cc7bf26e814ca00453a4a474a7b751e690e5aa2113afde5e13ec9cebb0b87d0c32a3128a96fea2bd19df9e50ee4ff0178532f8fb48788eea2be6acc0900ccede
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlJe/vevkMYingP5upm:Q+8X9G3vP3AMOevgygP5upm
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2