f181bfb45fb70db93f55b6d72b189c4b71bbe5f3e9953cd63dc1ed21428938dd

Sharing

Copy URL Twitter E-mail

General

Target
bin_file_1784698183829.txt
Size 2.6MB
Sample260722-gbwcgaba37
SHA256 f181bfb45fb70db93f55b6d72b189c4b71bbe5f3e9953cd63dc1ed21428938dd
MD5 d918fca3922bae7b6765ca7c53cb421b
SHA1 c0e99f3420bdd21c404936cae5c38453fe7db615
SHA512 bfb882d5447782316983451c9b82f4e8bad8a038fbdf447855ecd256a603f45b0a0c3fa9a7f861630ea2be613e621c3180d579fb58ce3e3d919fbac62fa39a6f
SSDEEP 49152:G5XuzOtGpEWiy9mTPgHZgvM6DsYU35MwDVqEAXZ4y4auZhf2sBBoSnUn:G5+zOtGpziemTPg5gUItU35MCAKauWsC
TLSH
T1F6D533581946D089EF58AF3DC7C442BC32DDDCC4A2F6D49BD4A2932349B0BA46F0F64A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  bin_file_1784698183829.txt
- Size 2.6MB
- SHA256 f181bfb45fb70db93f55b6d72b189c4b71bbe5f3e9953cd63dc1ed21428938dd
- MD5 d918fca3922bae7b6765ca7c53cb421b
- SHA1 c0e99f3420bdd21c404936cae5c38453fe7db615
- SHA512 bfb882d5447782316983451c9b82f4e8bad8a038fbdf447855ecd256a603f45b0a0c3fa9a7f861630ea2be613e621c3180d579fb58ce3e3d919fbac62fa39a6f
- SSDEEP 49152:G5XuzOtGpEWiy9mTPgHZgvM6DsYU35MwDVqEAXZ4y4auZhf2sBBoSnUn:G5+zOtGpziemTPg5gUItU35MCAKauWsC
- TLSH
  T1F6D533581946D089EF58AF3DC7C442BC32DDDCC4A2F6D49BD4A2932349B0BA46F0F64A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

ransomware execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral19 behavioral2 behavioral20 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20