36ce4571ea647ac133f1275721e02a14c1a1d26aa411057b7a4e6a29501fd047

Target
MDE_File_Sample_8bfcfbd757b6a355b563a6e65782e85703596669.zip.zip
Size 40KB
Sample260820-xfh6pstdjf
SHA256 36ce4571ea647ac133f1275721e02a14c1a1d26aa411057b7a4e6a29501fd047
MD5 61182d9cd2e985444be4b48fa76e1e66
SHA1 8efa740f85b0395ab8f6aa876aeb5c588760b56d
SHA512 44b9890fcb5b906c0fc4295ffe6d1bbadce03fd53451826d863f23323be0aa96ab8aab3873bb867e886be09a4b23fb4cf18b4c9a2dff5306d6aad7afd355e63b
SSDEEP 768:kuDCSDyetmNnobt2c65rbn+nQFmW+OC/RYxxyqodbi32ANesVQjFL:H1JmNoh2c65rqnkmWwGdoI32OPQpL
TLSH
T1CE13026403E1837A8F795E7FF1F353091AB355B2C14CEBAD908090E60458A71C76ADAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  MDE_File_Sample_8bfcfbd757b6a355b563a6e65782e85703596669.zip
- Size 40KB
- SHA256 a96c31f89bdf4431d25ae1b08582759a954d7c91bf3a2c6ecb98b35ce271fa4c
- MD5 1ad117627015a62badaa66af1d7c2e10
- SHA1 cd254565179efbbfbb0e3f929cf948915aa5ff64
- SHA512 11beb8849d0a6fd0b2bc06a0511d589313e55db20d2d3293e1944fe3ba687d6a26d635720ebf7647f2d2ccf4b75bd20ccdc01ab487567901cd2f5a807a50b61c
- SSDEEP 768:aO6j7BAVk3IYCPUgFgIVQpsrGYGl0rwQ6pUWIEH0Wgn4e+UgpqZHHu90/F2G2:sj7V3I8gFgIWpTYGl0UQ6bza4e+UfZnQ
- TLSH
  T11003F10F6B4056C16C7115F6FF862254B288477B74B5E88E25480FE44BFE4AB7B9DA02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2