9d12c0820f60d42d64ad6bf09a3e6044d2f3e21eed786bb104b6c1eef9c7f34e | Triage

Sharing

General

Target

NEAS.2023-09-05_64db45b338d899651d0e26762af4c2fb_mafia_JC.exe
Size

2.8MB
Sample

231031-13d22sgf35
MD5

64db45b338d899651d0e26762af4c2fb
SHA1

048e2b0de0a5f288b4be300dd1524ca1c911eea1
SHA256

9d12c0820f60d42d64ad6bf09a3e6044d2f3e21eed786bb104b6c1eef9c7f34e
SHA512

032045e5b24e7a0c98dbb41dfdf417a6ed62a7151961b43cbe35f17d38f7ebc4b7115b215b6296ce56b4091be798899d2369493b4e6630d6942c6e643e8f69fa
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlLiDAiyKoM9C:c+8X9G3vP3AMOABPMQ

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.2023-09-05_64db45b338d899651d0e26762af4c2fb_mafia_JC.exe
- Size
  
  2.8MB
- MD5
  
  64db45b338d899651d0e26762af4c2fb
- SHA1
  
  048e2b0de0a5f288b4be300dd1524ca1c911eea1
- SHA256
  
  9d12c0820f60d42d64ad6bf09a3e6044d2f3e21eed786bb104b6c1eef9c7f34e
- SHA512
  
  032045e5b24e7a0c98dbb41dfdf417a6ed62a7151961b43cbe35f17d38f7ebc4b7115b215b6296ce56b4091be798899d2369493b4e6630d6942c6e643e8f69fa
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlLiDAiyKoM9C:c+8X9G3vP3AMOABPMQ
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2