ff00558cef95475952739e66aef536e3360189dc208c23517b5c939f0ac42a0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff00558cef95475952739e66aef536e3360189dc208c23517b5c939f0ac42a0b
Size

304KB
Sample

221029-ml89zacde6
MD5

55296db770f3eab955e4ab92579f9748
SHA1

e50bd3c1e485ab1df266b256ce434b77890d5e06
SHA256

ff00558cef95475952739e66aef536e3360189dc208c23517b5c939f0ac42a0b
SHA512

7f8376143695804bb0e72792b7f1d55c9e31e19d1f3fd7ada86f41f8753c8e1885e851cdbd7fb6b75731d447bd6e294de864952bb4d72d60b91e6692611a801f
SSDEEP

6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPL:drkuu6/eIo4tQW62T+uTwM6YVxm24L

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ff00558cef95475952739e66aef536e3360189dc208c23517b5c939f0ac42a0b
- Size
  
  304KB
- MD5
  
  55296db770f3eab955e4ab92579f9748
- SHA1
  
  e50bd3c1e485ab1df266b256ce434b77890d5e06
- SHA256
  
  ff00558cef95475952739e66aef536e3360189dc208c23517b5c939f0ac42a0b
- SHA512
  
  7f8376143695804bb0e72792b7f1d55c9e31e19d1f3fd7ada86f41f8753c8e1885e851cdbd7fb6b75731d447bd6e294de864952bb4d72d60b91e6692611a801f
- SSDEEP
  
  6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPL:drkuu6/eIo4tQW62T+uTwM6YVxm24L
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2