b6a8f43ecaf81a020478e315954f4d65d9bce0e1d98635b350ac3fa1335b3df7 | Triage

Sharing

General

Target

b6a8f43ecaf81a020478e315954f4d65d9bce0e1d98635b350ac3fa1335b3df7
Size

693KB
Sample

240315-25gfmade4y
MD5

02b75e96d9b1ade54981ac2d077c9aef
SHA1

76f9d2aa57ef9837dfa94b92463f545dbe4fc8d4
SHA256

b6a8f43ecaf81a020478e315954f4d65d9bce0e1d98635b350ac3fa1335b3df7
SHA512

e31f6a1e42a9daefbceb986ba2bef96c3db907e99c83c9b23ea806fc2711a6da4685200db751a323c4ae1112b23c4ce2591eed4da6efffd280eb556e1418a3a5
SSDEEP

12288:l8kxNhOZElO5kkWjhD4AcGsGtAtScw3qEKB:WqEkfFN145

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  b6a8f43ecaf81a020478e315954f4d65d9bce0e1d98635b350ac3fa1335b3df7
- Size
  
  693KB
- MD5
  
  02b75e96d9b1ade54981ac2d077c9aef
- SHA1
  
  76f9d2aa57ef9837dfa94b92463f545dbe4fc8d4
- SHA256
  
  b6a8f43ecaf81a020478e315954f4d65d9bce0e1d98635b350ac3fa1335b3df7
- SHA512
  
  e31f6a1e42a9daefbceb986ba2bef96c3db907e99c83c9b23ea806fc2711a6da4685200db751a323c4ae1112b23c4ce2591eed4da6efffd280eb556e1418a3a5
- SSDEEP
  
  12288:l8kxNhOZElO5kkWjhD4AcGsGtAtScw3qEKB:WqEkfFN145
Score

7^/10

persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2