3f808addada078b471adba8d7c0c741ec26904bbc4bb4da89ea98f8069da8ba8 | Triage

Sharing

General

Target

3f808addada078b471adba8d7c0c741ec26904bbc4bb4da89ea98f8069da8ba8
Size

316KB
Sample

221030-hh7jrahahr
MD5

a260528bf094085bf70bcba32e57cf10
SHA1

0c449bf02ee7c8fe3826c4ee926942401ab1a85b
SHA256

3f808addada078b471adba8d7c0c741ec26904bbc4bb4da89ea98f8069da8ba8
SHA512

810a9c7499f5a5238f613fc6e35f982c297b81d923b3028c919c414885459e6fd56d8f794dd8477df30b128333136f599629c9f4079c8879ce640a8d312a70fe
SSDEEP

6144:orabUzkuvcBYC47l2x1V/GgGyjAj43W9jXdpcDfUEA1Ktmh:orDkuveY3SV/dK4gjrcV7tE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3f808addada078b471adba8d7c0c741ec26904bbc4bb4da89ea98f8069da8ba8
- Size
  
  316KB
- MD5
  
  a260528bf094085bf70bcba32e57cf10
- SHA1
  
  0c449bf02ee7c8fe3826c4ee926942401ab1a85b
- SHA256
  
  3f808addada078b471adba8d7c0c741ec26904bbc4bb4da89ea98f8069da8ba8
- SHA512
  
  810a9c7499f5a5238f613fc6e35f982c297b81d923b3028c919c414885459e6fd56d8f794dd8477df30b128333136f599629c9f4079c8879ce640a8d312a70fe
- SSDEEP
  
  6144:orabUzkuvcBYC47l2x1V/GgGyjAj43W9jXdpcDfUEA1Ktmh:orDkuveY3SV/dK4gjrcV7tE
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2