General

  • Target
    https://cdn.discordapp.com/attachments/1492118307204104285/1492118443745476779/Ledger_Larptools.rar?ex=6a5e0117&is=6a5caf97&hm=8f215b3f7cb0ee13e89359a2106f68f48d230f3251668111b02b1424ccdf94f2&
  • Sample260719-ryt32afv7t

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1492118307204104285/1492118443745476779/Ledger_Larptools.rar?ex=6a5e0117&is=6a5caf97&hm=8f215b3f7cb0ee13e89359a2106f68f48d230f3251668111b02b1424ccdf94f2&
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks