8d64b3230b3641096a1f395a63fcaad21ff242d6b6f7330697b037f2c2db7d8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d64b3230b3641096a1f395a63fcaad21ff242d6b6f7330697b037f2c2db7d8d
Size

327KB
Sample

221011-se8mraahf4
MD5

196f8acf5db1b87415a0b606e198b840
SHA1

f81b3173a44e37fd4ad5621376adfb63b312199c
SHA256

8d64b3230b3641096a1f395a63fcaad21ff242d6b6f7330697b037f2c2db7d8d
SHA512

b74f7b851e6d009c23d6cb29cc1bb47267ec506941ce12ce5282afdba297e1012dd35c97f6c8298bcba5068f300920ebda92c62c8593d3c6ba76fc92451b398f
SSDEEP

6144:srpbUzkuvcBYC47l2xKYEti5hHHQ9qZGoBRonSUIDdpK6KMydWT:srakuveY3PYT5xQrdVUbK6KMydy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8d64b3230b3641096a1f395a63fcaad21ff242d6b6f7330697b037f2c2db7d8d
- Size
  
  327KB
- MD5
  
  196f8acf5db1b87415a0b606e198b840
- SHA1
  
  f81b3173a44e37fd4ad5621376adfb63b312199c
- SHA256
  
  8d64b3230b3641096a1f395a63fcaad21ff242d6b6f7330697b037f2c2db7d8d
- SHA512
  
  b74f7b851e6d009c23d6cb29cc1bb47267ec506941ce12ce5282afdba297e1012dd35c97f6c8298bcba5068f300920ebda92c62c8593d3c6ba76fc92451b398f
- SSDEEP
  
  6144:srpbUzkuvcBYC47l2xKYEti5hHHQ9qZGoBRonSUIDdpK6KMydWT:srakuveY3PYT5xQrdVUbK6KMydy
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2