8ae42e28a776676605b1fdbcb35eb77d1f1db36cabe51446f634bd3b2506b914 | Triage

Sharing

General

Target

8ae42e28a776676605b1fdbcb35eb77d1f1db36cabe51446f634bd3b2506b914
Size

314KB
Sample

221021-dx2vlaabe2
MD5

4487ac206382ffb253114c12aaf09150
SHA1

ae8d620f916fc19e6b53a0dedb59bdfca153dd5b
SHA256

8ae42e28a776676605b1fdbcb35eb77d1f1db36cabe51446f634bd3b2506b914
SHA512

660739aa3b0c521b3e5aae61a77019027917cf60ee9c37a4b9b81fb7fb1e894a333441c4c3b25f785a3f2acaf148cfcd958f893c91ed38deb5c74a307791071d
SSDEEP

6144:GreyVm/tSbUzkuvcBYC47l2xywzjVaXJuM39ZLg5FxXsD+49oCg0o3z:GrzVm/pkuveY3nwdatzg5fXsD+49lg9j

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8ae42e28a776676605b1fdbcb35eb77d1f1db36cabe51446f634bd3b2506b914
- Size
  
  314KB
- MD5
  
  4487ac206382ffb253114c12aaf09150
- SHA1
  
  ae8d620f916fc19e6b53a0dedb59bdfca153dd5b
- SHA256
  
  8ae42e28a776676605b1fdbcb35eb77d1f1db36cabe51446f634bd3b2506b914
- SHA512
  
  660739aa3b0c521b3e5aae61a77019027917cf60ee9c37a4b9b81fb7fb1e894a333441c4c3b25f785a3f2acaf148cfcd958f893c91ed38deb5c74a307791071d
- SSDEEP
  
  6144:GreyVm/tSbUzkuvcBYC47l2xywzjVaXJuM39ZLg5FxXsD+49oCg0o3z:GrzVm/pkuveY3nwdatzg5fXsD+49lg9j
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2