7ed36ccaf9a39a0432bca00fbb8f14fa5371501ff92ffe0335f9b74805c2d45e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ed36ccaf9a39a0432bca00fbb8f14fa5371501ff92ffe0335f9b74805c2d45e
Size

2.8MB
Sample

231122-jwfhvsba78
MD5

b9ff65ded69a316999d67a3d6ed380e9
SHA1

9c50d87586a21ab2d43dd92f3cb50701c7431849
SHA256

7ed36ccaf9a39a0432bca00fbb8f14fa5371501ff92ffe0335f9b74805c2d45e
SHA512

cbf31a9af33bab72287ba3f76a3f902b4ebe08935bf1838dd6d4a748c17c480ce7f6aa42750826912c2db9afb471a964c755edb4e26df5e7b06165006ccaee71
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlwhO4tpTnoFtbRRmhPB4:Q+8X9G3vP3AMCsy0nmPB4

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  7ed36ccaf9a39a0432bca00fbb8f14fa5371501ff92ffe0335f9b74805c2d45e
- Size
  
  2.8MB
- MD5
  
  b9ff65ded69a316999d67a3d6ed380e9
- SHA1
  
  9c50d87586a21ab2d43dd92f3cb50701c7431849
- SHA256
  
  7ed36ccaf9a39a0432bca00fbb8f14fa5371501ff92ffe0335f9b74805c2d45e
- SHA512
  
  cbf31a9af33bab72287ba3f76a3f902b4ebe08935bf1838dd6d4a748c17c480ce7f6aa42750826912c2db9afb471a964c755edb4e26df5e7b06165006ccaee71
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlwhO4tpTnoFtbRRmhPB4:Q+8X9G3vP3AMCsy0nmPB4
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2