ca3044dfccc433becd0cafc0823ab1141b20a7244e07e0326ebcc136e6690947 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca3044dfccc433becd0cafc0823ab1141b20a7244e07e0326ebcc136e6690947
Size

3.4MB
Sample

231011-r39z2sfg29
MD5

34df05934d8a86eb85b5799a98eb369c
SHA1

451adaef4abc0171fb63ccc605f77f69ee4fcf5c
SHA256

ca3044dfccc433becd0cafc0823ab1141b20a7244e07e0326ebcc136e6690947
SHA512

86db919d95a213bd4cd62deb4f8db68058d2e5db68d9b28b2d6a629fc93c64973c2083f1b2549ce719683599b14e91260d4cf9a053f82f0ea032620e23dedb1d
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTllhKqwSj+6dnMWq6pA9:Q+8X9G3vP3AMlsSS6dnLQ

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  ca3044dfccc433becd0cafc0823ab1141b20a7244e07e0326ebcc136e6690947
- Size
  
  3.4MB
- MD5
  
  34df05934d8a86eb85b5799a98eb369c
- SHA1
  
  451adaef4abc0171fb63ccc605f77f69ee4fcf5c
- SHA256
  
  ca3044dfccc433becd0cafc0823ab1141b20a7244e07e0326ebcc136e6690947
- SHA512
  
  86db919d95a213bd4cd62deb4f8db68058d2e5db68d9b28b2d6a629fc93c64973c2083f1b2549ce719683599b14e91260d4cf9a053f82f0ea032620e23dedb1d
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTllhKqwSj+6dnMWq6pA9:Q+8X9G3vP3AMlsSS6dnLQ
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2