c14f74262e62618f6634d503c9e7421d4b3c9e0562f16cf6cefa11e9b26bfaf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c14f74262e62618f6634d503c9e7421d4b3c9e0562f16cf6cefa11e9b26bfaf7
Size

3.4MB
Sample

231107-htx5fsed88
MD5

6a20cda9bddee83e048e5f136b0a60fa
SHA1

29b0daad46ce4db5d4be2b97932dc9ce53f0dcdf
SHA256

c14f74262e62618f6634d503c9e7421d4b3c9e0562f16cf6cefa11e9b26bfaf7
SHA512

b7c18a2f400cb82626b4e6108da0468d2419c06dd189788c1b90d1a1672a290ba93e44b2036008e8cbd141a35f97505c8925b83726470ba3a596f7f80b1a082e
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTldllFBUVuA7y/15hKosatJ/A:Q+8X9G3vP3AMjley/1znsatJ/A

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  c14f74262e62618f6634d503c9e7421d4b3c9e0562f16cf6cefa11e9b26bfaf7
- Size
  
  3.4MB
- MD5
  
  6a20cda9bddee83e048e5f136b0a60fa
- SHA1
  
  29b0daad46ce4db5d4be2b97932dc9ce53f0dcdf
- SHA256
  
  c14f74262e62618f6634d503c9e7421d4b3c9e0562f16cf6cefa11e9b26bfaf7
- SHA512
  
  b7c18a2f400cb82626b4e6108da0468d2419c06dd189788c1b90d1a1672a290ba93e44b2036008e8cbd141a35f97505c8925b83726470ba3a596f7f80b1a082e
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTldllFBUVuA7y/15hKosatJ/A:Q+8X9G3vP3AMjley/1znsatJ/A
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2