437101ecc445a0ca11a5a33234aae9b97cec35361c7c2877f743ff820b776f72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

437101ecc445a0ca11a5a33234aae9b97cec35361c7c2877f743ff820b776f72
Size

3.2MB
Sample

231023-zbtgzsgg86
MD5

bf7ae7d30fa95d6486606fc764a1b7b2
SHA1

add2d86ff273e23a3df8c514f5b06b44b64ce089
SHA256

437101ecc445a0ca11a5a33234aae9b97cec35361c7c2877f743ff820b776f72
SHA512

f51d6b0deb008ccdef5c9cae0c1fdfde1cfa87dcc24bfbb4cd181bc16fe9da7eb2889608ae9c08620a7153f7e114a708bfb1ad06c02e162049bca82aaca74829
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlXNtMk5+Cl2w8XCm/W:c+8X9G3vP3AMlPMu+DF0

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  437101ecc445a0ca11a5a33234aae9b97cec35361c7c2877f743ff820b776f72
- Size
  
  3.2MB
- MD5
  
  bf7ae7d30fa95d6486606fc764a1b7b2
- SHA1
  
  add2d86ff273e23a3df8c514f5b06b44b64ce089
- SHA256
  
  437101ecc445a0ca11a5a33234aae9b97cec35361c7c2877f743ff820b776f72
- SHA512
  
  f51d6b0deb008ccdef5c9cae0c1fdfde1cfa87dcc24bfbb4cd181bc16fe9da7eb2889608ae9c08620a7153f7e114a708bfb1ad06c02e162049bca82aaca74829
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlXNtMk5+Cl2w8XCm/W:c+8X9G3vP3AMlPMu+DF0
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2