aa2409375f6adde319b50d6c56a9b26cdde61181132be568a8955566807305ee | Triage

Sharing

General

Target

aa2409375f6adde319b50d6c56a9b26cdde61181132be568a8955566807305ee
Size

2.8MB
Sample

231011-ks8wnsed98
MD5

61c4ead708ae44e1a9b6acaa63945404
SHA1

1016b1b79b4619254e0f4e68611972f0d631e9b9
SHA256

aa2409375f6adde319b50d6c56a9b26cdde61181132be568a8955566807305ee
SHA512

b2cf6b1556a6d2f2c82f2ddefd4cab0f765211266c023860c68d1729d4addadb717a3c926be6d59ed287f6a50c20ad791d2b0f4efb09340b10b851f5b950e18a
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlVLYTq4YT5K7:Q+8X9G3vP3AMnEqLtc

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  aa2409375f6adde319b50d6c56a9b26cdde61181132be568a8955566807305ee
- Size
  
  2.8MB
- MD5
  
  61c4ead708ae44e1a9b6acaa63945404
- SHA1
  
  1016b1b79b4619254e0f4e68611972f0d631e9b9
- SHA256
  
  aa2409375f6adde319b50d6c56a9b26cdde61181132be568a8955566807305ee
- SHA512
  
  b2cf6b1556a6d2f2c82f2ddefd4cab0f765211266c023860c68d1729d4addadb717a3c926be6d59ed287f6a50c20ad791d2b0f4efb09340b10b851f5b950e18a
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlVLYTq4YT5K7:Q+8X9G3vP3AMnEqLtc
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2