2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da | Triage

Sharing

General

Target

2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da
Size

64KB
Sample

221029-tm8hdsdff9
MD5

8497b8b0d79d29dc848336102520ec80
SHA1

77012cff55d72b695a5a6700c99132ffe34400f7
SHA256

2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da
SHA512

2d5aff1feb02634c1d86fd03c76ced026a5be826833ded34dbb74a5377ef40f4dc4784d14b3f6bb04c5b077d17cd9477c2e5794bcfc18fc1519db43a2ff72a3f
SSDEEP

768:LfCS04EpnIPz8v96hkbObB5w0ocEnaLj8+IBfCylsCclAYbpzX2:Lf/044I78v969EnaLj8bh+l1

Score

7^/10

Malware Config

Targets

- Target
  
  2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da
- Size
  
  64KB
- MD5
  
  8497b8b0d79d29dc848336102520ec80
- SHA1
  
  77012cff55d72b695a5a6700c99132ffe34400f7
- SHA256
  
  2bfe293b13ee52f81320c6451d1fcd822bf3eeadf3c8cb12ba01d731936a83da
- SHA512
  
  2d5aff1feb02634c1d86fd03c76ced026a5be826833ded34dbb74a5377ef40f4dc4784d14b3f6bb04c5b077d17cd9477c2e5794bcfc18fc1519db43a2ff72a3f
- SSDEEP
  
  768:LfCS04EpnIPz8v96hkbObB5w0ocEnaLj8+IBfCylsCclAYbpzX2:Lf/044I78v969EnaLj8bh+l1
Score

7^/10
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2