97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b | Triage

Sharing

General

Target

97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b
Size

72KB
Sample

221012-rvsqssfea4
MD5

6a66342fc974b506d4316fd56b2c3d60
SHA1

144fc7eab428173a2488dcafc72749c4cf6123aa
SHA256

97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b
SHA512

88e245cb8418d888167a5545762b9617f3022804e2292f2396e61dc4b8c178891e56ebb03dfbf2680a335dd4fad1c6181444b548b7018331208566047b5e8bb7
SSDEEP

1536:ZphbisPfQAaBLsNlP0ufZxKKKKKKKKKRL:pdPYoPjfZU

Score

7^/10

Malware Config

Targets

- Target
  
  97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b
- Size
  
  72KB
- MD5
  
  6a66342fc974b506d4316fd56b2c3d60
- SHA1
  
  144fc7eab428173a2488dcafc72749c4cf6123aa
- SHA256
  
  97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b
- SHA512
  
  88e245cb8418d888167a5545762b9617f3022804e2292f2396e61dc4b8c178891e56ebb03dfbf2680a335dd4fad1c6181444b548b7018331208566047b5e8bb7
- SSDEEP
  
  1536:ZphbisPfQAaBLsNlP0ufZxKKKKKKKKKRL:pdPYoPjfZU
Score

7^/10
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2