626b4325d615a044f2528a9a8b9af186f999809e7a52eba7bbd5415671fdc36d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

626b4325d615a044f2528a9a8b9af186f999809e7a52eba7bbd5415671fdc36d
Size

3.3MB
Sample

231122-j1yj8sbb36
MD5

13f44ce7523e2c4c8f0b2d489239f1d2
SHA1

5b264cd9d5dbe5f49f9a55536f4c4f95c7da7073
SHA256

626b4325d615a044f2528a9a8b9af186f999809e7a52eba7bbd5415671fdc36d
SHA512

81c1b993b5f5ae29a5f45dca8298dbeb23ff62c39e29275a33c0ea7089096e196ea4ba04b69974d1df6a5819105c29fb8a45f195e6f108f0fd878fe9d5cc1759
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlVs5VnKvAXNOTyJyOOm7:c+8X9G3vP3AMI5rHOm7

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  626b4325d615a044f2528a9a8b9af186f999809e7a52eba7bbd5415671fdc36d
- Size
  
  3.3MB
- MD5
  
  13f44ce7523e2c4c8f0b2d489239f1d2
- SHA1
  
  5b264cd9d5dbe5f49f9a55536f4c4f95c7da7073
- SHA256
  
  626b4325d615a044f2528a9a8b9af186f999809e7a52eba7bbd5415671fdc36d
- SHA512
  
  81c1b993b5f5ae29a5f45dca8298dbeb23ff62c39e29275a33c0ea7089096e196ea4ba04b69974d1df6a5819105c29fb8a45f195e6f108f0fd878fe9d5cc1759
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlVs5VnKvAXNOTyJyOOm7:c+8X9G3vP3AMI5rHOm7
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2