3f9a692c21a0fcf79df71d41d1be9745e1e6b30733c94ff0cb0cd51e0f3c4c07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f9a692c21a0fcf79df71d41d1be9745e1e6b30733c94ff0cb0cd51e0f3c4c07
Size

3.0MB
Sample

231011-z6embaff92
MD5

8b627ea98f33d152cc19d5031197b6b9
SHA1

382dff07bd1408d6735c1308b4e71e9bd3ed0176
SHA256

3f9a692c21a0fcf79df71d41d1be9745e1e6b30733c94ff0cb0cd51e0f3c4c07
SHA512

6d0e6827ff9fd16f289b710070febc02ffdbe38fbbb96ff7869ad3900427e344375006c612261ae048ae8916376e1b80547c4cc7efa3c311f77ecea3c44184e7
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlE6NpFQi/DXD0cR:Q+8X9G3vP3AMKkcKDtR

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  3f9a692c21a0fcf79df71d41d1be9745e1e6b30733c94ff0cb0cd51e0f3c4c07
- Size
  
  3.0MB
- MD5
  
  8b627ea98f33d152cc19d5031197b6b9
- SHA1
  
  382dff07bd1408d6735c1308b4e71e9bd3ed0176
- SHA256
  
  3f9a692c21a0fcf79df71d41d1be9745e1e6b30733c94ff0cb0cd51e0f3c4c07
- SHA512
  
  6d0e6827ff9fd16f289b710070febc02ffdbe38fbbb96ff7869ad3900427e344375006c612261ae048ae8916376e1b80547c4cc7efa3c311f77ecea3c44184e7
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlE6NpFQi/DXD0cR:Q+8X9G3vP3AMKkcKDtR
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2