d3d030a3f418d6dd63189ef380a087435420ba699cfac84ee5f7d3d2e97136c2 | Triage

Sharing

General

Target

d3d030a3f418d6dd63189ef380a087435420ba699cfac84ee5f7d3d2e97136c2
Size

2.6MB
Sample

231011-whzqsseg88
MD5

6168b58cbb7e98f2a9259999f25672ee
SHA1

226e2d908241c301f82ed408d9c81e98587dc740
SHA256

d3d030a3f418d6dd63189ef380a087435420ba699cfac84ee5f7d3d2e97136c2
SHA512

0a28bc6e7a910c195629d5dc3348192e89ff782b703508ebc8a4f6b232501bc9c2c4741fdf0b58afd7d1f5200e360211e130a69fbb9a1d9c59392d957d3c6548
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlWTiDbDfDm3aBr9D/q6:Q+8X9G3vP3AM8TEbD7sGE6

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  d3d030a3f418d6dd63189ef380a087435420ba699cfac84ee5f7d3d2e97136c2
- Size
  
  2.6MB
- MD5
  
  6168b58cbb7e98f2a9259999f25672ee
- SHA1
  
  226e2d908241c301f82ed408d9c81e98587dc740
- SHA256
  
  d3d030a3f418d6dd63189ef380a087435420ba699cfac84ee5f7d3d2e97136c2
- SHA512
  
  0a28bc6e7a910c195629d5dc3348192e89ff782b703508ebc8a4f6b232501bc9c2c4741fdf0b58afd7d1f5200e360211e130a69fbb9a1d9c59392d957d3c6548
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlWTiDbDfDm3aBr9D/q6:Q+8X9G3vP3AM8TEbD7sGE6
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2