General

  • Target
    plankton.pth
  • Size 52.7MB
  • Sample260630-ch39facv5z
  • SHA256 0f2055ba27be30a54dd4a769254da8ed15e4a41eec9e2ea9b7c702c0d52955eb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      plankton.pth
    • Size 52.7MB
    • SHA256 0f2055ba27be30a54dd4a769254da8ed15e4a41eec9e2ea9b7c702c0d52955eb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      plankton/data.pkl
    • Size 60KB
    • SHA256 19081e6b4e8adf5cf617c4600d76f94682917301a8376369778f39c649dd1648
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      plankton/data/0
    • Size 288KB
    • SHA256 c4a769c11b38f90e7445056779f5ff348c63433fc27188f8efd85ec27a5da2a0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      plankton/data/1
    • Size 384B
    • SHA256 7685096307da22f5d4d68ff66571c842a6dbbeafd5d21162b3c96afce89bfbc1
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      plankton/data/10
    • Size 384B
    • SHA256 a3fc035f94ef9ec21e9cf9dc11f9089a1df5314556decd2bc4f81a5ed23036a6
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      plankton/data/100
    • Size 384B
    • SHA256 ab0768928da771c879f32decca2789e41d3da369ab44f486c68e4b186630fa9b
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      plankton/data/101
    • Size 384B
    • SHA256 600f64667ab278b041ca09b5d313319180159def1ed107a2a00036cc9216c67c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      plankton/data/102
    • Size 384B
    • SHA256 3a0ea953ecb49ab11ef9dbad516a9ab40c8ba556ca7563869d492164c9b5d495
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      plankton/data/103
    • Size 384B
    • SHA256 d8aad12a857bf0c23d4bdb7f2c88473649a13a5fdb5537406b33d880502ae831
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      plankton/data/104
    • Size 384B
    • SHA256 eeab77c5a80fcf657e92cad4239cfe1dc7ef3f38093033f7d7215622add2d800
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      plankton/data/105
    • Size 384B
    • SHA256 4c8c9d67d6d5417a6950b21c5f00df208886efc3f3e04b86070c43360411443f
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      plankton/data/106
    • Size 384B
    • SHA256 18469936ea2368cdf2b1a497cbe0ec9ca50a183fb55a1776b22f8027f1bcb17d
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      plankton/data/107
    • Size 384B
    • SHA256 28513f98eee550cb90787131edc78e7769fb092527449f204f53ed227eabb8fd
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      plankton/data/108
    • Size 384B
    • SHA256 38bc165eadf7f460db8769f7d9b65db1daf285b4b011f857aff5f530d54e951b
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      plankton/data/109
    • Size 384B
    • SHA256 c6fd9ca42212143fe55f99c6edb2e4c6a3ea36f6bb5abd80d1ae7409744aa4b4
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      plankton/data/11
    • Size 72KB
    • SHA256 792bc10f8cf5c2e106417b7b67bb8bdb86398898743727629786bde8b29422d2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

adwarepersistencespyware
Score
8/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
1/10

behavioral6

adwarepersistencespyware
Score
8/10

behavioral7

Score
1/10

behavioral8

adwarepersistencespyware
Score
8/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

adwarepersistencespyware
Score
8/10

behavioral17

Score
1/10

behavioral18

adwarepersistencespyware
Score
8/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

adwarepersistencespyware
Score
8/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10