ff63474a5d45c501f0ff4bbb28f8e3c3c1148f324c9973c649c2038d2a30a0a7 | Triage

Sharing

General

Target

ff63474a5d45c501f0ff4bbb28f8e3c3c1148f324c9973c649c2038d2a30a0a7
Size

73KB
Sample

221020-fw1bgsfde6
MD5

7bfd03d9537a11f59c00abdb870f8fa0
SHA1

49c4951b5eb57d324c7082aa326b5075f2a89519
SHA256

ff63474a5d45c501f0ff4bbb28f8e3c3c1148f324c9973c649c2038d2a30a0a7
SHA512

a6140d3c6acbcbfe6296d406b0d4318a90e8b6ff7b3cc461d4d86fdd87596f6f63ad0334f80b8435c1293183b324c6e6a9f47ffbe906415f4fd2e3c5fc348686
SSDEEP

768:ghEXA94anygNshhqqYCNQ4UXUEPLsbaxlWuzG3k4TajMMEU5yepCxmf:ghp4uyhelkeLg40xhmrp8m

Score

7^/10

Malware Config

Targets

- Target
  
  ff63474a5d45c501f0ff4bbb28f8e3c3c1148f324c9973c649c2038d2a30a0a7
- Size
  
  73KB
- MD5
  
  7bfd03d9537a11f59c00abdb870f8fa0
- SHA1
  
  49c4951b5eb57d324c7082aa326b5075f2a89519
- SHA256
  
  ff63474a5d45c501f0ff4bbb28f8e3c3c1148f324c9973c649c2038d2a30a0a7
- SHA512
  
  a6140d3c6acbcbfe6296d406b0d4318a90e8b6ff7b3cc461d4d86fdd87596f6f63ad0334f80b8435c1293183b324c6e6a9f47ffbe906415f4fd2e3c5fc348686
- SSDEEP
  
  768:ghEXA94anygNshhqqYCNQ4UXUEPLsbaxlWuzG3k4TajMMEU5yepCxmf:ghp4uyhelkeLg40xhmrp8m
Score

7^/10
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2