fd237c710bdeaf95a9b520f86aea1a0b471d7aaa671b383528522417de8f2904

Sharing

Copy URL Twitter E-mail

General

Target
sample
Size 7KB
Sample260808-c4kdfsydmg
SHA256 fd237c710bdeaf95a9b520f86aea1a0b471d7aaa671b383528522417de8f2904
MD5 fa235717ca0ca976035d0664362f95a0
SHA1 58715c5db1b9f69dff3bafcf3e85a3cc0a1fc6b8
SHA512 224936d263986be68326f3855a9e3e587b13e9b380872d55bbf5222e9c700fee70ab0a083c6a4ec49ef1615af62b7ba98685be5fa1e86e92227661b27dfca6b5
SSDEEP 192:XctFWXpqD8yhu1fUFOpWUR8I5eHxw4ctBE:qQXUfhu1oO8tI5O5cE
TLSH
T17DE14A185984362B44738B784BB32148EF61B0A79523E1A23ADC65970FB6350CED33CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  sample
- Size 7KB
- SHA256 fd237c710bdeaf95a9b520f86aea1a0b471d7aaa671b383528522417de8f2904
- MD5 fa235717ca0ca976035d0664362f95a0
- SHA1 58715c5db1b9f69dff3bafcf3e85a3cc0a1fc6b8
- SHA512 224936d263986be68326f3855a9e3e587b13e9b380872d55bbf5222e9c700fee70ab0a083c6a4ec49ef1615af62b7ba98685be5fa1e86e92227661b27dfca6b5
- SSDEEP 192:XctFWXpqD8yhu1fUFOpWUR8I5eHxw4ctBE:qQXUfhu1oO8tI5O5cE
- TLSH
  T17DE14A185984362B44738B784BB32148EF61B0A79523E1A23ADC65970FB6350CED33CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral19 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19