4876bf4846be072c99a4786864622586289839784998a6c4ed08a52a37b4e569 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4876bf4846be072c99a4786864622586289839784998a6c4ed08a52a37b4e569
Size

3.2MB
Sample

231014-wrje6seb71
MD5

ddb8b14ac98ee161a5ef2e3a26a54ead
SHA1

63e130b8f7a5f78e13cb92c41a28a760f5a7909a
SHA256

4876bf4846be072c99a4786864622586289839784998a6c4ed08a52a37b4e569
SHA512

08e7d1823f56137225acf1591c89eb2192cc7ddb2f95a17ebec1242924f5ecf44dadf9ccdef8bc4148eb4f12b3bafb7c681b0e680506cc7f97cccd8c41e2b091
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl4pyZo3fG6xtRcQbQR:Q+8X9G3vP3AM8YovF3O

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  4876bf4846be072c99a4786864622586289839784998a6c4ed08a52a37b4e569
- Size
  
  3.2MB
- MD5
  
  ddb8b14ac98ee161a5ef2e3a26a54ead
- SHA1
  
  63e130b8f7a5f78e13cb92c41a28a760f5a7909a
- SHA256
  
  4876bf4846be072c99a4786864622586289839784998a6c4ed08a52a37b4e569
- SHA512
  
  08e7d1823f56137225acf1591c89eb2192cc7ddb2f95a17ebec1242924f5ecf44dadf9ccdef8bc4148eb4f12b3bafb7c681b0e680506cc7f97cccd8c41e2b091
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl4pyZo3fG6xtRcQbQR:Q+8X9G3vP3AM8YovF3O
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2