cf13150f15abe8c8ee5822950d9b6314e4b79c6734c3214e9ffcc637f44fce89

Sharing

Copy URL Twitter E-mail

General

Target
DS_Store
Size 10KB
Sample260913-adqrfacb33
SHA256 cf13150f15abe8c8ee5822950d9b6314e4b79c6734c3214e9ffcc637f44fce89
MD5 ae078ba29ba5870a86e75e32af328a84
SHA1 450c81e0a1fa12dfd0d87f4711e572ce7d5df4c4
SHA512 8bbca0c98c047f4c9bef774934a8042d6b1161796b218f005afdb10723752692e2e0d331a7a19ede04e86b24afa78a9e7f5ee315e109d69c1a4d0ae0c7285efd
SSDEEP 48:s3qOuA6uAg1lhHlh4ilhYilhlL5LRLxL/4lhHlh4ilhYilhlL5LRLC:oqOuTmL4mYmpVd9UL4mYmpVdC
TLSH
T1DD228378CEE01977F277C535AD77A2D6AFF1B68331010E0F9AA505060D23B2A6C89D1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  DS_Store
- Size 10KB
- SHA256 cf13150f15abe8c8ee5822950d9b6314e4b79c6734c3214e9ffcc637f44fce89
- MD5 ae078ba29ba5870a86e75e32af328a84
- SHA1 450c81e0a1fa12dfd0d87f4711e572ce7d5df4c4
- SHA512 8bbca0c98c047f4c9bef774934a8042d6b1161796b218f005afdb10723752692e2e0d331a7a19ede04e86b24afa78a9e7f5ee315e109d69c1a4d0ae0c7285efd
- SSDEEP 48:s3qOuA6uAg1lhHlh4ilhYilhlL5LRLxL/4lhHlh4ilhYilhlL5LRLC:oqOuTmL4mYmpVd9UL4mYmpVdC
- TLSH
  T1DD228378CEE01977F277C535AD77A2D6AFF1B68331010E0F9AA505060D23B2A6C89D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral10 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10