2b8af31bc0c14b916e01b9c5436ebdf4fe862db9cb3f328b78377de24ae3b58c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b8af31bc0c14b916e01b9c5436ebdf4fe862db9cb3f328b78377de24ae3b58c
Size

316KB
Sample

221011-d5ttysdaen
MD5

7c28587ef4be4fc9054aa9c09de967f0
SHA1

bd3d500101803d678415d4c3ec2b3b1ec2d2f03f
SHA256

2b8af31bc0c14b916e01b9c5436ebdf4fe862db9cb3f328b78377de24ae3b58c
SHA512

897b0c9f81d39380bdf178e2d11ace21c32bc62508900419d35c60d646f8c6dd8e69179e2f41db4625d2d99a9c2ed8aade9a0cbb319258bc5a7b8793ec5c19d8
SSDEEP

6144:vrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMU:vr2kuveY3ZF31N4XxZjU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2b8af31bc0c14b916e01b9c5436ebdf4fe862db9cb3f328b78377de24ae3b58c
- Size
  
  316KB
- MD5
  
  7c28587ef4be4fc9054aa9c09de967f0
- SHA1
  
  bd3d500101803d678415d4c3ec2b3b1ec2d2f03f
- SHA256
  
  2b8af31bc0c14b916e01b9c5436ebdf4fe862db9cb3f328b78377de24ae3b58c
- SHA512
  
  897b0c9f81d39380bdf178e2d11ace21c32bc62508900419d35c60d646f8c6dd8e69179e2f41db4625d2d99a9c2ed8aade9a0cbb319258bc5a7b8793ec5c19d8
- SSDEEP
  
  6144:vrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMU:vr2kuveY3ZF31N4XxZjU
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2