0c959063e227ad13e8b373cb073d4edb622c94e834634d010b4565b9987815a9 | Triage

Sharing

General

Target

VirusShare-46d03cb395d05db670af74a2d99a7cc5
Size

211KB
Sample

240203-p2v4dsbhep
MD5

46d03cb395d05db670af74a2d99a7cc5
SHA1

46da3ffef49c358352794e7e536b4d8ff2dc8d5e
SHA256

0c959063e227ad13e8b373cb073d4edb622c94e834634d010b4565b9987815a9
SHA512

d315c4c66902dcfbb1b113375db5db4adf1b9185d91a73bd829ecddbb791a5a4ee2dbcfed1ee15307d7d21eb8d9ba254147430ea20e0eb0bb18a58450d7518d9
SSDEEP

3072:ZlVKq0eV0MSXCsEODSpXi72zqdSsCYmj5aV+r/aWE+D:Zl4MSXOODSpX+aOSBwV+rFBD

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  VirusShare-46d03cb395d05db670af74a2d99a7cc5
- Size
  
  211KB
- MD5
  
  46d03cb395d05db670af74a2d99a7cc5
- SHA1
  
  46da3ffef49c358352794e7e536b4d8ff2dc8d5e
- SHA256
  
  0c959063e227ad13e8b373cb073d4edb622c94e834634d010b4565b9987815a9
- SHA512
  
  d315c4c66902dcfbb1b113375db5db4adf1b9185d91a73bd829ecddbb791a5a4ee2dbcfed1ee15307d7d21eb8d9ba254147430ea20e0eb0bb18a58450d7518d9
- SSDEEP
  
  3072:ZlVKq0eV0MSXCsEODSpXi72zqdSsCYmj5aV+r/aWE+D:Zl4MSXOODSpX+aOSBwV+rFBD
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence