ede23ecbadfea175ccb8a7011a896b780d6e5fc1400fffcbbc95509a7137587e | Triage

Sharing

General

Target

ede23ecbadfea175ccb8a7011a896b780d6e5fc1400fffcbbc95509a7137587e
Size

3.6MB
Sample

231011-cwxntahg9t
MD5

777230b8ab5038f787d8c0a4b850e55c
SHA1

89c831e4265c9a9d7ee5848433ee4fe2715cd99b
SHA256

ede23ecbadfea175ccb8a7011a896b780d6e5fc1400fffcbbc95509a7137587e
SHA512

a38d2d9f5d08e65b17c0dfe6e633b0168003ece8ec530a7b35e145e8be472ab3d5451d1ed68c8da671db2b5cfe14131d45f9e86448f04c6a4a43636daf212ce2
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlkUVD+j6BxhitGedG/Hg5167/+Lz+:c+8X9G3vP3AM5VxLitGgG/Hg516+z+

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  ede23ecbadfea175ccb8a7011a896b780d6e5fc1400fffcbbc95509a7137587e
- Size
  
  3.6MB
- MD5
  
  777230b8ab5038f787d8c0a4b850e55c
- SHA1
  
  89c831e4265c9a9d7ee5848433ee4fe2715cd99b
- SHA256
  
  ede23ecbadfea175ccb8a7011a896b780d6e5fc1400fffcbbc95509a7137587e
- SHA512
  
  a38d2d9f5d08e65b17c0dfe6e633b0168003ece8ec530a7b35e145e8be472ab3d5451d1ed68c8da671db2b5cfe14131d45f9e86448f04c6a4a43636daf212ce2
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlkUVD+j6BxhitGedG/Hg5167/+Lz+:c+8X9G3vP3AM5VxLitGgG/Hg516+z+
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2