3402df5c538910f9703dbd0a8c1a773e8b4bdcc67d74d3a4689f69da6f3a0f80 | Triage

Sharing

General

Target

3402df5c538910f9703dbd0a8c1a773e8b4bdcc67d74d3a4689f69da6f3a0f80
Size

2.6MB
Sample

231122-j43ncsbg91
MD5

589bcf62363eabe7eb86e029da96c630
SHA1

9455f044cbc78973c3de73280cdbf047cba7d78b
SHA256

3402df5c538910f9703dbd0a8c1a773e8b4bdcc67d74d3a4689f69da6f3a0f80
SHA512

0125bbf2b48ff73769779e59f34d54dd146f0f6f863f18da067d711b41bb39f80c51ced9bbb858517c6a95f2986c3124bf04364202172c787eb901c426e82590
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlDBCPmAM8:c+8X9G3vP3AMBBCPs8

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  3402df5c538910f9703dbd0a8c1a773e8b4bdcc67d74d3a4689f69da6f3a0f80
- Size
  
  2.6MB
- MD5
  
  589bcf62363eabe7eb86e029da96c630
- SHA1
  
  9455f044cbc78973c3de73280cdbf047cba7d78b
- SHA256
  
  3402df5c538910f9703dbd0a8c1a773e8b4bdcc67d74d3a4689f69da6f3a0f80
- SHA512
  
  0125bbf2b48ff73769779e59f34d54dd146f0f6f863f18da067d711b41bb39f80c51ced9bbb858517c6a95f2986c3124bf04364202172c787eb901c426e82590
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlDBCPmAM8:c+8X9G3vP3AMBBCPs8
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2