9526d0cb5587e171e6afa26d5ea5eb57e860706e530d93000649563ff83cedd3

Sharing

Copy URL Twitter E-mail

General

Target
t234-pcn210100-pcn211461-emmc-35.3.1.tbz2
Size 40KB
Sample260702-alzpbaas2t
SHA256 9526d0cb5587e171e6afa26d5ea5eb57e860706e530d93000649563ff83cedd3
MD5 92e69c34b35e4b6bdf84d49cfad2c368
SHA1 4fb718a955cdda17d68678c214e6c84236e0329d
SHA512 c0f7d78e26e31ea4247e6d6162ab7abaacc212b65db1e2e919e84ee51fbb52104de8364f5837cbfc2b78b2ce11607e5c23523b8064d06641d431df7e85562f67
SSDEEP 768:Fj6yPCIJNnALmPo35MAH4OAs9gGmsyWRyNyyFpmsuNZx3u/qAAlT6HKD:BNJN6pMAYhsGLsykrQSwCDlGg
TLSH
T1E013F12408EB263AEFC5983A0F2452EF1D0D9A57ACA547D707B7772E523B85E040E74B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  sample
- Size 170KB
- SHA256 07f86e85bc07ed8fce4e2ce2912011a49909517ed4277ba8125896fc1132fe9f
- MD5 32ed754a54d4a568f732ec79b0127536
- SHA1 8d09f63b6ab3b19e05ce82c138a4c7264a9bd5ca
- SHA512 34368fb2905fa9ef22d3a59318b65e2d076653342f670b4de4b60c0241b305e2bc1b20d910cf14ae37b2c1954fd6fca23a7a9161b32cc57f4abdf559e8c73a45
- SSDEEP 3072:VB51EkqTRzwqnTa9sV/cg//RfAuLnrmv06V81kfhB4aj2+:lSTRzwqTa9sVO4a
- TLSH
  T15B041A0ABF0C1BE5D241C1F89F1951CA6F2D8297CE6A2C96B0EC745D237A6F8C5F8851
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Linux_for_Tegra/flash.sh
- Size 132KB
- SHA256 94b5ab834622cb5a0dcc09ef3314261e06236e086b49cc7c4bdf17286a99b8de
- MD5 a5cbb1f3cd2c9c9fe06c1e080a7cbe54
- SHA1 95b6aa038add0193e95e2d25bb516a4f9c256403
- SHA512 5a7c8067a84d4ff867fd267abb0a270e0883588f8f8037ef67e32adeb921ec04229d13a9491d02f8bb525dfc48d013b5601c1e2910666e435af48d60d833c219
- SSDEEP 3072:gB51EkqTRzwqnTa9sV/cg//RfAuLnrmv06V81kfM:qSTRzwqTa9sVOE
- TLSH
  T169D3E706FF0C1FE56242C198CF1951CA6F2D4297CE6A2C96B4EC389923797F8C9F8855
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  Linux_for_Tegra/p3701.conf.common
- Size 10KB
- SHA256 d06e5dce5ccd0519e287650e3338725cf3466a2ac0281230c78996b9d198031e
- MD5 318db202438def62cd24e708162f2a90
- SHA1 2200eee27a2c40d8fde2fed462f24cd573c25089
- SHA512 7bdaff5a434d047ea964d33ecab4f9b8b507bc4e9b2cf3b56cda5b5d265d9904251458124cc5ae290378d410ee64ec727cf16888fe4286b16f4b206615426689
- SSDEEP 192:7DrsSrsqD3rt3KmX8NVTD1czcOiUo3p+9zP6BV3ADjbea/jvGIIPmWMxSd:nrsSrsqbxKCgIGUo3p+9zP6n46a/jv1W
- TLSH
  T11422931EBB05DA91D090CDC42F392588A51AF50CD7CA786F24E4F9D946FB2D4C1BBD82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8