957c2c5efb91e6abfce35b3d820411051190371f58c7e354bd73b8dbaa4e6a04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

957c2c5efb91e6abfce35b3d820411051190371f58c7e354bd73b8dbaa4e6a04
Size

2.6MB
Sample

231102-llvadaca98
MD5

286c9397525912026ea9f0bb5402a9f2
SHA1

da3f76c627a4bf7c3142f8ca2a40b5b826037842
SHA256

957c2c5efb91e6abfce35b3d820411051190371f58c7e354bd73b8dbaa4e6a04
SHA512

8c3557e66b7e2d2a1960293b95360bca91d3debf418f985fdea2fc1467799fa2fb931e608403598df24174fe04f0722e33317fd9d8c472753fadaa074ece401d
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlVgJsxWxPDc3C:Q+8X9G3vP3AMj+yy4C

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  957c2c5efb91e6abfce35b3d820411051190371f58c7e354bd73b8dbaa4e6a04
- Size
  
  2.6MB
- MD5
  
  286c9397525912026ea9f0bb5402a9f2
- SHA1
  
  da3f76c627a4bf7c3142f8ca2a40b5b826037842
- SHA256
  
  957c2c5efb91e6abfce35b3d820411051190371f58c7e354bd73b8dbaa4e6a04
- SHA512
  
  8c3557e66b7e2d2a1960293b95360bca91d3debf418f985fdea2fc1467799fa2fb931e608403598df24174fe04f0722e33317fd9d8c472753fadaa074ece401d
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlVgJsxWxPDc3C:Q+8X9G3vP3AMj+yy4C
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2