c9b67969e66be63b77482a3cbebbb626dbdb61e36b65af405a8b7afa9ca86e5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9b67969e66be63b77482a3cbebbb626dbdb61e36b65af405a8b7afa9ca86e5d
Size

3.0MB
Sample

231011-nzesysdb5v
MD5

b0ed33824c1cf2bc00b48c0d5ee2660e
SHA1

71d948731e3b554c18673a0cc24dcb74c2e55340
SHA256

c9b67969e66be63b77482a3cbebbb626dbdb61e36b65af405a8b7afa9ca86e5d
SHA512

4d8443bb6b3ac403117c294a2f7fc09feaf37b05e1c14632308d642f66acea85acb69593516556fa6ce03450b32fa2ec32d2591bd4c300976dd4cd8c5398ec36
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl4HSWYWGqdSShJW:c+8X9G3vP3AMOHS3ncq

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  c9b67969e66be63b77482a3cbebbb626dbdb61e36b65af405a8b7afa9ca86e5d
- Size
  
  3.0MB
- MD5
  
  b0ed33824c1cf2bc00b48c0d5ee2660e
- SHA1
  
  71d948731e3b554c18673a0cc24dcb74c2e55340
- SHA256
  
  c9b67969e66be63b77482a3cbebbb626dbdb61e36b65af405a8b7afa9ca86e5d
- SHA512
  
  4d8443bb6b3ac403117c294a2f7fc09feaf37b05e1c14632308d642f66acea85acb69593516556fa6ce03450b32fa2ec32d2591bd4c300976dd4cd8c5398ec36
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl4HSWYWGqdSShJW:c+8X9G3vP3AMOHS3ncq
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2