fe84820eacbc46fb1a8ba3c920e3771c691bd5ab149fe5538ee6119403e2d709 | Triage

Sharing

General

Target

fe84820eacbc46fb1a8ba3c920e3771c691bd5ab149fe5538ee6119403e2d709
Size

368KB
Sample

231117-ntvl8aaa9v
MD5

46fb854794dd7e8a562ff094e373c619
SHA1

507d628b773877b1d95028ca896a68c766fb4c4e
SHA256

fe84820eacbc46fb1a8ba3c920e3771c691bd5ab149fe5538ee6119403e2d709
SHA512

9e5378aaf7774cb58e646b466e7d12f05a1097ee3cf1613118083ca80a90cc717e0759ba1ecf5a7367bfea59e33190e611e95416bf091a2c2e5d01815dc12471
SSDEEP

6144:MajdMJyFRe6azHqTG5WbWNF+WR4VyKh6gks2YuypIGR:x2JylsKTPW4VyPgPruypIGR

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  fe84820eacbc46fb1a8ba3c920e3771c691bd5ab149fe5538ee6119403e2d709
- Size
  
  368KB
- MD5
  
  46fb854794dd7e8a562ff094e373c619
- SHA1
  
  507d628b773877b1d95028ca896a68c766fb4c4e
- SHA256
  
  fe84820eacbc46fb1a8ba3c920e3771c691bd5ab149fe5538ee6119403e2d709
- SHA512
  
  9e5378aaf7774cb58e646b466e7d12f05a1097ee3cf1613118083ca80a90cc717e0759ba1ecf5a7367bfea59e33190e611e95416bf091a2c2e5d01815dc12471
- SSDEEP
  
  6144:MajdMJyFRe6azHqTG5WbWNF+WR4VyKh6gks2YuypIGR:x2JylsKTPW4VyPgPruypIGR
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2