ab54ef3e81a40242287946c0232da3cb4e95fd7c93ad35996b3768afa88a43ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab54ef3e81a40242287946c0232da3cb4e95fd7c93ad35996b3768afa88a43ff
Size

304KB
Sample

221030-t229xsabd8
MD5

82e938ed99cd881cf8a3b715b8caddb0
SHA1

566e323fba2564b9198a7d176acc4ff24990673a
SHA256

ab54ef3e81a40242287946c0232da3cb4e95fd7c93ad35996b3768afa88a43ff
SHA512

a1a9344cb4370ebd44a14b98dc8da559b7565360acb3796217a4a630828688cc1a610af2dfa08f3b1073f18ed8b8da920c5bbcddec984322a19c59ad5efc0957
SSDEEP

6144:6rkw6Y0JQBkQRl7174NpNUM+UHs+tPvpqvpQAy+L9hMk+W60z4RRWW:6rkw63yRl1uqM+gs+tPvEpPy+rMzuW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ab54ef3e81a40242287946c0232da3cb4e95fd7c93ad35996b3768afa88a43ff
- Size
  
  304KB
- MD5
  
  82e938ed99cd881cf8a3b715b8caddb0
- SHA1
  
  566e323fba2564b9198a7d176acc4ff24990673a
- SHA256
  
  ab54ef3e81a40242287946c0232da3cb4e95fd7c93ad35996b3768afa88a43ff
- SHA512
  
  a1a9344cb4370ebd44a14b98dc8da559b7565360acb3796217a4a630828688cc1a610af2dfa08f3b1073f18ed8b8da920c5bbcddec984322a19c59ad5efc0957
- SSDEEP
  
  6144:6rkw6Y0JQBkQRl7174NpNUM+UHs+tPvpqvpQAy+L9hMk+W60z4RRWW:6rkw63yRl1uqM+gs+tPvEpPy+rMzuW
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2