8ff0d8aad1783eab59aaf16ab2f5fcd71715c54397bb127f044e6f748d783ca0 | Triage

Sharing

General

Target

8ff0d8aad1783eab59aaf16ab2f5fcd71715c54397bb127f044e6f748d783ca0
Size

316KB
Sample

221030-henx8sghdq
MD5

a2cf21c7fa8ab7415a817cc88985a410
SHA1

707dea6b012cfde07bc39024afff6b554b27e7bd
SHA256

8ff0d8aad1783eab59aaf16ab2f5fcd71715c54397bb127f044e6f748d783ca0
SHA512

f57ac151d59e3e51ca98606bfb0d8a988f402bd53a48d0f3be3665877736acaaa020f7dba4d496568e53681d2dba250f918a65750d420463884d5ffcc8ae20e5
SSDEEP

6144:VrybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2pho5:VrLkuveY3EMK9ObxD/06s5w3BL5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8ff0d8aad1783eab59aaf16ab2f5fcd71715c54397bb127f044e6f748d783ca0
- Size
  
  316KB
- MD5
  
  a2cf21c7fa8ab7415a817cc88985a410
- SHA1
  
  707dea6b012cfde07bc39024afff6b554b27e7bd
- SHA256
  
  8ff0d8aad1783eab59aaf16ab2f5fcd71715c54397bb127f044e6f748d783ca0
- SHA512
  
  f57ac151d59e3e51ca98606bfb0d8a988f402bd53a48d0f3be3665877736acaaa020f7dba4d496568e53681d2dba250f918a65750d420463884d5ffcc8ae20e5
- SSDEEP
  
  6144:VrybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2pho5:VrLkuveY3EMK9ObxD/06s5w3BL5
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2