d6e0cbaef67c3f312951274b9e48f2bff53833e2ad656b9e9a92bd153469c520 | Triage

Sharing

General

Target

d6e0cbaef67c3f312951274b9e48f2bff53833e2ad656b9e9a92bd153469c520
Size

2.9MB
Sample

231119-pafjmaaf4s
MD5

c0b5b050244940faab747fd6d5e66fb2
SHA1

2beec65f0f297491e22c8adcf393abe2a75d9ce6
SHA256

d6e0cbaef67c3f312951274b9e48f2bff53833e2ad656b9e9a92bd153469c520
SHA512

b33e0c010099232415c7c2925209d34c6b6d1916b4d3161576f2d4424ec726ef8a7634d32114855f5f4cb5e67589931cecc9e837929c49534c6604bc9dd5a1c7
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlubqwN2ddY1LUU+c:Q+8X9G3vP3AM+DNUUl

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  d6e0cbaef67c3f312951274b9e48f2bff53833e2ad656b9e9a92bd153469c520
- Size
  
  2.9MB
- MD5
  
  c0b5b050244940faab747fd6d5e66fb2
- SHA1
  
  2beec65f0f297491e22c8adcf393abe2a75d9ce6
- SHA256
  
  d6e0cbaef67c3f312951274b9e48f2bff53833e2ad656b9e9a92bd153469c520
- SHA512
  
  b33e0c010099232415c7c2925209d34c6b6d1916b4d3161576f2d4424ec726ef8a7634d32114855f5f4cb5e67589931cecc9e837929c49534c6604bc9dd5a1c7
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlubqwN2ddY1LUU+c:Q+8X9G3vP3AM+DNUUl
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2