8e931e2b17aef6c4ee80fdda283274e3cb73d66b4d3fb54667c92f9fdd8656d0 | Triage

Sharing

General

Target

8e931e2b17aef6c4ee80fdda283274e3cb73d66b4d3fb54667c92f9fdd8656d0
Size

3.5MB
Sample

231022-hb8hgade6x
MD5

cf88e4f149d216c8cd97b2bba764ff62
SHA1

8b6c2007190a4ba1939c3c2356a630a23d37c403
SHA256

8e931e2b17aef6c4ee80fdda283274e3cb73d66b4d3fb54667c92f9fdd8656d0
SHA512

e3b53dd7d248f5d8bab7b0f7e9e9db5e151bd859be9724239811502d9e90f8971c83c724311af8bb337cafff1bd2d4d5cce3c01739245a6a8251972169d0e534
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlkG0Z8f40Xm8a9Q6OKxp6w:c+8X9G3vP3AMmPuw0Evxp6w

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  8e931e2b17aef6c4ee80fdda283274e3cb73d66b4d3fb54667c92f9fdd8656d0
- Size
  
  3.5MB
- MD5
  
  cf88e4f149d216c8cd97b2bba764ff62
- SHA1
  
  8b6c2007190a4ba1939c3c2356a630a23d37c403
- SHA256
  
  8e931e2b17aef6c4ee80fdda283274e3cb73d66b4d3fb54667c92f9fdd8656d0
- SHA512
  
  e3b53dd7d248f5d8bab7b0f7e9e9db5e151bd859be9724239811502d9e90f8971c83c724311af8bb337cafff1bd2d4d5cce3c01739245a6a8251972169d0e534
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlkG0Z8f40Xm8a9Q6OKxp6w:c+8X9G3vP3AMmPuw0Evxp6w
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2