1e36736517201b398abace157f6dcb76d0f32d2e1805a57dc2e2a6c7fd6027e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e36736517201b398abace157f6dcb76d0f32d2e1805a57dc2e2a6c7fd6027e1
Size

3.4MB
Sample

231011-cpzvlabh56
MD5

9ad6b7a40f6a653969e83f4b4d84aab2
SHA1

12d9a1a3df6f8f925d1b04c08245d657d414180d
SHA256

1e36736517201b398abace157f6dcb76d0f32d2e1805a57dc2e2a6c7fd6027e1
SHA512

523b49b3a4212d034c2547ce18044ed1fec989d72d3b5e7b8c3b1b43b6743e61c941ec072606e23d03852a1ca04cd9665e71f59ff5ac6cf165ab3c0efadb649d
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl959ifD40KPk6ShKvLDzqrs:c+8X9G3vP3AMt9vklKvLDzqA

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  1e36736517201b398abace157f6dcb76d0f32d2e1805a57dc2e2a6c7fd6027e1
- Size
  
  3.4MB
- MD5
  
  9ad6b7a40f6a653969e83f4b4d84aab2
- SHA1
  
  12d9a1a3df6f8f925d1b04c08245d657d414180d
- SHA256
  
  1e36736517201b398abace157f6dcb76d0f32d2e1805a57dc2e2a6c7fd6027e1
- SHA512
  
  523b49b3a4212d034c2547ce18044ed1fec989d72d3b5e7b8c3b1b43b6743e61c941ec072606e23d03852a1ca04cd9665e71f59ff5ac6cf165ab3c0efadb649d
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl959ifD40KPk6ShKvLDzqrs:c+8X9G3vP3AMt9vklKvLDzqA
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2