afc31d5081c6e7a017a263d3daf9a89f61f3bc138f12be9de2fa0c13dab75f8e | Triage

Sharing

General

Target

afc31d5081c6e7a017a263d3daf9a89f61f3bc138f12be9de2fa0c13dab75f8e
Size

314KB
Sample

221030-w8tmgadhf7
MD5

82b0605bc90c4301487a1b98ff3a8260
SHA1

e7adc47219c1568609f352cdfe45671c1c22006b
SHA256

afc31d5081c6e7a017a263d3daf9a89f61f3bc138f12be9de2fa0c13dab75f8e
SHA512

f34576af48d9b1e1b021ac4c27febf5b8949590b3986c69a941cf7a11b32315bbb9f617c9f098402d11a1dc37f1123d065b2be73486a7d4bfe02451bf41e03f1
SSDEEP

6144:WreyVm/tSbUzkuvcBYC47l2xywzjVaXJuM39ZLg5FxXsD+49oCg0onj:WrzVm/pkuveY3nwdatzg5fXsD+49lg9j

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  afc31d5081c6e7a017a263d3daf9a89f61f3bc138f12be9de2fa0c13dab75f8e
- Size
  
  314KB
- MD5
  
  82b0605bc90c4301487a1b98ff3a8260
- SHA1
  
  e7adc47219c1568609f352cdfe45671c1c22006b
- SHA256
  
  afc31d5081c6e7a017a263d3daf9a89f61f3bc138f12be9de2fa0c13dab75f8e
- SHA512
  
  f34576af48d9b1e1b021ac4c27febf5b8949590b3986c69a941cf7a11b32315bbb9f617c9f098402d11a1dc37f1123d065b2be73486a7d4bfe02451bf41e03f1
- SSDEEP
  
  6144:WreyVm/tSbUzkuvcBYC47l2xywzjVaXJuM39ZLg5FxXsD+49oCg0onj:WrzVm/pkuveY3nwdatzg5fXsD+49lg9j
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2