502b5ded89c15693356b782e839a91bbaf2e8599edf42379a1dd80a4f09f5790 | Triage

Sharing

General

Target

29_07_52_21.232.zip
Size

1.7MB
Sample

240729-jr651syhmr
MD5

e976bcf9a16b72dc93ee0f2c52b724b9
SHA1

29e33d6ab0d5eadda968122d738aa3c066131185
SHA256

502b5ded89c15693356b782e839a91bbaf2e8599edf42379a1dd80a4f09f5790
SHA512

eb0f9e242723f9e0d6420aff385e2616d44857d1a813b1fd4d7b1e513fba6fc30c9eb0ee64e4fe600b49aee5f3bc4457b88fc67e6ebaf24ac5cbd1476a089ff1
SSDEEP

49152:IoFI7BCmfJRJZGC/+ne63KbfSGXMyHJ+24qYCyFo:I/79fLrGC/RbfSGlHJ+jqjf

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  Device/HarddiskVolume3/Users/bennahia/Downloads/Stormshot.PC.V1.0_09dd7712bf.exe
- Size
  
  2.8MB
- MD5
  
  6aae47cbaa4c56095a1eb0422c1d2ecb
- SHA1
  
  34e29d1801d270a2bd7ac02d4ea84c14c553d66f
- SHA256
  
  ffd63fe2aeaa91f05bef47b3583290ccdba3f44912ab8b67044f3d58bf817ebf
- SHA512
  
  d6b2406922d2618816db55110bf12a8579b69325e0c196d0d2508bafec68a0430acf48482160bf42cca4bd0995d864abfa2425e8e5af794c8d8d1c430fee4cff
- SSDEEP
  
  49152:c8ZQVqWu+fqu79LNTRBO1L2VQjJY80KruthaPVu+2zE0y5VCmdAlacRk3Y:vZARtBEqVQq80ThzTzEElask3Y
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence