efdfffbd95646755112e1c52311317461e66de1508342250122613b0d0c2e73a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efdfffbd95646755112e1c52311317461e66de1508342250122613b0d0c2e73a
Size

316KB
Sample

221019-rw3mdscdaj
MD5

9079d5b04920387a0127bd3ab3c8a730
SHA1

5ae266aad7a8b034808dda4f879c244e351fce3a
SHA256

efdfffbd95646755112e1c52311317461e66de1508342250122613b0d0c2e73a
SHA512

f73db989c8288626e0a9215340db1a5ff1e3f5b3ee7efa368a2eb7f6f064c141118b98c0ba90b61d70614a55c59133b4a1cf4303a1e3c34bf0f58b9abf2a200c
SSDEEP

6144:1rJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bSRs:1r6kuveY3TT2XdGp9xRC4bS+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  efdfffbd95646755112e1c52311317461e66de1508342250122613b0d0c2e73a
- Size
  
  316KB
- MD5
  
  9079d5b04920387a0127bd3ab3c8a730
- SHA1
  
  5ae266aad7a8b034808dda4f879c244e351fce3a
- SHA256
  
  efdfffbd95646755112e1c52311317461e66de1508342250122613b0d0c2e73a
- SHA512
  
  f73db989c8288626e0a9215340db1a5ff1e3f5b3ee7efa368a2eb7f6f064c141118b98c0ba90b61d70614a55c59133b4a1cf4303a1e3c34bf0f58b9abf2a200c
- SSDEEP
  
  6144:1rJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bSRs:1r6kuveY3TT2XdGp9xRC4bS+
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2