62b5f3d0161b7b936b55277e6676a10e21c9f6037c98cb4206316976f36fca99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70c81a886cca574b5bfee01dbdb8dcc9
Size

35KB
Sample

240123-2yaphaccd3
MD5

70c81a886cca574b5bfee01dbdb8dcc9
SHA1

dd7f3e6a038e6415d74e7cd221dc11f21d7b8f62
SHA256

62b5f3d0161b7b936b55277e6676a10e21c9f6037c98cb4206316976f36fca99
SHA512

cfd1a52df06bb8192ebd703f1f315029b94b59eb32372127b98ea72c5c8793390404c8e85a051acfe5280f3608a154342cf224acb383cb5e2fa9fc1f2e2dae3b
SSDEEP

768:J6LiRTtlquXp7pPPuWJknGi0mJcWZSPh1nQMXYKj:ULoTauX9hPuNPPcWoPDnQMXLj

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  70c81a886cca574b5bfee01dbdb8dcc9
- Size
  
  35KB
- MD5
  
  70c81a886cca574b5bfee01dbdb8dcc9
- SHA1
  
  dd7f3e6a038e6415d74e7cd221dc11f21d7b8f62
- SHA256
  
  62b5f3d0161b7b936b55277e6676a10e21c9f6037c98cb4206316976f36fca99
- SHA512
  
  cfd1a52df06bb8192ebd703f1f315029b94b59eb32372127b98ea72c5c8793390404c8e85a051acfe5280f3608a154342cf224acb383cb5e2fa9fc1f2e2dae3b
- SSDEEP
  
  768:J6LiRTtlquXp7pPPuWJknGi0mJcWZSPh1nQMXYKj:ULoTauX9hPuNPPcWoPDnQMXLj
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2