ef3a14aa6ecb437477eca4c58483ad98625769394da70e8a2c74c0469ef1c704

Sharing

Copy URL Twitter E-mail

General

Target
transactions_2025.csv
Size 813B
Sample260712-qc3ydact7v
SHA256 ef3a14aa6ecb437477eca4c58483ad98625769394da70e8a2c74c0469ef1c704
MD5 eb26775ab74bf0091dd3734c8f196c15
SHA1 18c8a74813d7bb454397b5742affa98098d28b6b
SHA512 b556003c1a6eefcc8a274721e20a70f9e83ddfeb73c181d38fed265d5c7ee4ffa0fcae18e7c8d3c5ba28f1a8f16e8172e0649141e802c6aee0cc2b993e02d227
TLSH
T11C0126AC816A2A64FCA4D84022EE356EE0B4F00A48DDDD26A0C0C69D8764E396F40605
MD5 SHA1 SHA512 TLSH

Score

8^/10

Malware Config

Targets

- Target
  transactions_2025.csv
- Size 813B
- SHA256 ef3a14aa6ecb437477eca4c58483ad98625769394da70e8a2c74c0469ef1c704
- MD5 eb26775ab74bf0091dd3734c8f196c15
- SHA1 18c8a74813d7bb454397b5742affa98098d28b6b
- SHA512 b556003c1a6eefcc8a274721e20a70f9e83ddfeb73c181d38fed265d5c7ee4ffa0fcae18e7c8d3c5ba28f1a8f16e8172e0649141e802c6aee0cc2b993e02d227
- TLSH
  T11C0126AC816A2A64FCA4D84022EE356EE0B4F00A48DDDD26A0C0C69D8764E396F40605
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8