2b5b2d47f51beb0f92e7c7e78f530b28dd1fc8e394760982d8de3ffb0e868368 | Triage

Sharing

General

Target

2b5b2d47f51beb0f92e7c7e78f530b28dd1fc8e394760982d8de3ffb0e868368
Size

2.7MB
Sample

231120-mkkj8agb7y
MD5

49463d61f73ecd145a3e0fdae2f9b372
SHA1

703f31c6014d5f84f6c79c49e8963bc097a15a09
SHA256

2b5b2d47f51beb0f92e7c7e78f530b28dd1fc8e394760982d8de3ffb0e868368
SHA512

df12d1ba01ab09bc4c75ee7de7d8fbc78befae77be64300c4cc9bbb80a080f7b4a49fce2ac729b026455087300e73d2062b967b064d0fc02152bc1c8677dfbcc
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlpLjVvdScLHp4EgW:c+8X9G3vP3AMrVlSE

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  2b5b2d47f51beb0f92e7c7e78f530b28dd1fc8e394760982d8de3ffb0e868368
- Size
  
  2.7MB
- MD5
  
  49463d61f73ecd145a3e0fdae2f9b372
- SHA1
  
  703f31c6014d5f84f6c79c49e8963bc097a15a09
- SHA256
  
  2b5b2d47f51beb0f92e7c7e78f530b28dd1fc8e394760982d8de3ffb0e868368
- SHA512
  
  df12d1ba01ab09bc4c75ee7de7d8fbc78befae77be64300c4cc9bbb80a080f7b4a49fce2ac729b026455087300e73d2062b967b064d0fc02152bc1c8677dfbcc
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlpLjVvdScLHp4EgW:c+8X9G3vP3AMrVlSE
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2