309bb43fefd09f7d20038593132fd0405be7df1766f25fdcaa96533decd5f632

Sharing

Copy URL Twitter E-mail

General

Target
recently-used.xbel
Size 2KB
Sample261007-w875vstx8m
SHA256 309bb43fefd09f7d20038593132fd0405be7df1766f25fdcaa96533decd5f632
MD5 716124eef8729d772449eb9b1571b20b
SHA1 900e09fb25ffeaf306b4923c5ca9f14cb28840f5
SHA512 6ff1a7e99a29ac80bfaad5a559d1b62a8a35e865da21a1165d23087182ba6eacc4df26d4ecd2c57b8e1272ed58cc199a78d4cdc3fd22f3cb4dae37a06f1900ca
TLSH
T11B41AD9EFDF358D60E62143B86A6EBC45A37BAD782D9D43732CC7B198F0546C1503121
MD5 SHA1 SHA512 TLSH

Score

8^/10

Malware Config

Targets

- Target
  recently-used.xbel
- Size 2KB
- SHA256 309bb43fefd09f7d20038593132fd0405be7df1766f25fdcaa96533decd5f632
- MD5 716124eef8729d772449eb9b1571b20b
- SHA1 900e09fb25ffeaf306b4923c5ca9f14cb28840f5
- SHA512 6ff1a7e99a29ac80bfaad5a559d1b62a8a35e865da21a1165d23087182ba6eacc4df26d4ecd2c57b8e1272ed58cc199a78d4cdc3fd22f3cb4dae37a06f1900ca
- TLSH
  T11B41AD9EFDF358D60E62143B86A6EBC45A37BAD782D9D43732CC7B198F0546C1503121
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral10 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10