1ae41344c7d68c7aebb94e621686080184517558f7d8352a9226454b1aa80ba5 | Triage

Resubmissions

28/04/2024, 12:10

240428-pcfmeafg41 8

28/04/2024, 12:10

240428-pb3esafd67 8

28/04/2024, 12:08

240428-pbbxtsfg2x 8

Sharing

General

Target

PODCAST ACCIDENTE DE LESANS 1999 TIC.mp3
Size

6.9MB
Sample

240428-pbbxtsfg2x
MD5

bb5899b89ad054ccc7b43d5614ad2fa6
SHA1

d8823879aa842a690c6ee03130edc17ba62f132a
SHA256

1ae41344c7d68c7aebb94e621686080184517558f7d8352a9226454b1aa80ba5
SHA512

3877ef74682f1981da96c4e8f4fe1aa337a11aa582efaa70b33efbccccde8f022d420bb7ba8e365dafdd97021f0443717c9575f74fd55ef960eb00b51b774247
SSDEEP

98304:8D9YYCSm/bhTXaJ4vu9oqluBpi3BiRF+NxNNvOINcElu2pdv:8D6Tb7kEBIAmN82L

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  PODCAST ACCIDENTE DE LESANS 1999 TIC.mp3
- Size
  
  6.9MB
- MD5
  
  bb5899b89ad054ccc7b43d5614ad2fa6
- SHA1
  
  d8823879aa842a690c6ee03130edc17ba62f132a
- SHA256
  
  1ae41344c7d68c7aebb94e621686080184517558f7d8352a9226454b1aa80ba5
- SHA512
  
  3877ef74682f1981da96c4e8f4fe1aa337a11aa582efaa70b33efbccccde8f022d420bb7ba8e365dafdd97021f0443717c9575f74fd55ef960eb00b51b774247
- SSDEEP
  
  98304:8D9YYCSm/bhTXaJ4vu9oqluBpi3BiRF+NxNNvOINcElu2pdv:8D6Tb7kEBIAmN82L
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2