80ad97cf9b826bc7e8a79fdfb425aaa5331b7907e68a46a8cd4a19f92a391429 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80ad97cf9b826bc7e8a79fdfb425aaa5331b7907e68a46a8cd4a19f92a391429
Size

64KB
Sample

221028-w3bvgaafek
MD5

0c08f018b6e1b7a2cac5521f1e715d60
SHA1

37f99d548db9beb23bbff517878ea6446068d8ae
SHA256

80ad97cf9b826bc7e8a79fdfb425aaa5331b7907e68a46a8cd4a19f92a391429
SHA512

62fa6dc86b4b7c35bb3da763a2abc9ff0869ca7bec7ac455876f17bd68bf238f926c83dea08a029cc5a607484c6f0cdde2dc1390ffd43d8c460d431863fa8062
SSDEEP

768:uH5iwINqA58ZQHegeH22Au7gOKktdptJf1IHI8ANO26n6mOuqhn1oCD4te:uH5i5+/vSHBT26n67jn1

Score

7^/10

Malware Config

Targets

- Target
  
  80ad97cf9b826bc7e8a79fdfb425aaa5331b7907e68a46a8cd4a19f92a391429
- Size
  
  64KB
- MD5
  
  0c08f018b6e1b7a2cac5521f1e715d60
- SHA1
  
  37f99d548db9beb23bbff517878ea6446068d8ae
- SHA256
  
  80ad97cf9b826bc7e8a79fdfb425aaa5331b7907e68a46a8cd4a19f92a391429
- SHA512
  
  62fa6dc86b4b7c35bb3da763a2abc9ff0869ca7bec7ac455876f17bd68bf238f926c83dea08a029cc5a607484c6f0cdde2dc1390ffd43d8c460d431863fa8062
- SSDEEP
  
  768:uH5iwINqA58ZQHegeH22Au7gOKktdptJf1IHI8ANO26n6mOuqhn1oCD4te:uH5i5+/vSHBT26n67jn1
Score

7^/10
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2