29d17e5d3eafb3a4022cbb49e5a8f8d90d48ed1704a6282571399cd2fd21431a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20142bb4fb4cf228eb9b40ce5c6e0bef
Size

304KB
Sample

231230-3hse2sddbk
MD5

20142bb4fb4cf228eb9b40ce5c6e0bef
SHA1

7a01c6a2c7fb5f2da4d9da564895af44099ee218
SHA256

29d17e5d3eafb3a4022cbb49e5a8f8d90d48ed1704a6282571399cd2fd21431a
SHA512

e92a1829e6c80c785ceaa7d557016b83b14531384cb21e9fda6c7737fc22eec73ae4a5cdfc872701510bae9736f91c96a632de9afd1e90f6837b58a3a4da2fc2
SSDEEP

6144:Fldx3Ic+PfD/O6ZuMGAW9FXXcGXSKDD4Hul6JkhzZjdH:FVYJT26ZXGAW97XSsD2ojlJ

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  20142bb4fb4cf228eb9b40ce5c6e0bef
- Size
  
  304KB
- MD5
  
  20142bb4fb4cf228eb9b40ce5c6e0bef
- SHA1
  
  7a01c6a2c7fb5f2da4d9da564895af44099ee218
- SHA256
  
  29d17e5d3eafb3a4022cbb49e5a8f8d90d48ed1704a6282571399cd2fd21431a
- SHA512
  
  e92a1829e6c80c785ceaa7d557016b83b14531384cb21e9fda6c7737fc22eec73ae4a5cdfc872701510bae9736f91c96a632de9afd1e90f6837b58a3a4da2fc2
- SSDEEP
  
  6144:Fldx3Ic+PfD/O6ZuMGAW9FXXcGXSKDD4Hul6JkhzZjdH:FVYJT26ZXGAW97XSsD2ojlJ
Score

7^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2