710b3482060d50489dfa7c72aa86e164ed0dcb8f1a971fc2d1ee778365c0e9c2 | Triage

Sharing

General

Target

NEAS.2023-09-08_827b08febc85e11caec114827d3ec2da_mafia_JC.exe
Size

2.6MB
Sample

231021-zyvzbsbh85
MD5

827b08febc85e11caec114827d3ec2da
SHA1

e06e7dcff31055f2687fee94b499824d7624e15c
SHA256

710b3482060d50489dfa7c72aa86e164ed0dcb8f1a971fc2d1ee778365c0e9c2
SHA512

e7731514834f79da0acb040b8d447fc4021df7f325b73c086f0235edd3a48a4381328f4300836ec522abd10e973dabc9b1a1153a53833335539e904978c84473
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlZNgH2iEbM0TCnv:c+8X9G3vP3AMI2i70TCv

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.2023-09-08_827b08febc85e11caec114827d3ec2da_mafia_JC.exe
- Size
  
  2.6MB
- MD5
  
  827b08febc85e11caec114827d3ec2da
- SHA1
  
  e06e7dcff31055f2687fee94b499824d7624e15c
- SHA256
  
  710b3482060d50489dfa7c72aa86e164ed0dcb8f1a971fc2d1ee778365c0e9c2
- SHA512
  
  e7731514834f79da0acb040b8d447fc4021df7f325b73c086f0235edd3a48a4381328f4300836ec522abd10e973dabc9b1a1153a53833335539e904978c84473
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlZNgH2iEbM0TCnv:c+8X9G3vP3AMI2i70TCv
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2