ab6f0a30a4826567c09a9d776ac0cb2b07d9cc665d92cffd0a70391c660a591e | Triage

Sharing

General

Target

ab6f0a30a4826567c09a9d776ac0cb2b07d9cc665d92cffd0a70391c660a591e
Size

327KB
Sample

221107-lqvfyacfhp
MD5

44580413650490eee281f7bae54195dd
SHA1

8a80cc2b092489630614e1444788f43626937b5f
SHA256

ab6f0a30a4826567c09a9d776ac0cb2b07d9cc665d92cffd0a70391c660a591e
SHA512

ef61c5c5a23a80896f9fa2734c7cccabd7897c01fc3dca5e390130fe7be0b6a599ce37774c951badde67d0b7dbe08a984be64858ca44c8479da4bd35e7e1a6c8
SSDEEP

6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FA:xr4iu6/eIo4Rsw33AtsmQ9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ab6f0a30a4826567c09a9d776ac0cb2b07d9cc665d92cffd0a70391c660a591e
- Size
  
  327KB
- MD5
  
  44580413650490eee281f7bae54195dd
- SHA1
  
  8a80cc2b092489630614e1444788f43626937b5f
- SHA256
  
  ab6f0a30a4826567c09a9d776ac0cb2b07d9cc665d92cffd0a70391c660a591e
- SHA512
  
  ef61c5c5a23a80896f9fa2734c7cccabd7897c01fc3dca5e390130fe7be0b6a599ce37774c951badde67d0b7dbe08a984be64858ca44c8479da4bd35e7e1a6c8
- SSDEEP
  
  6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FA:xr4iu6/eIo4Rsw33AtsmQ9
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2