ffad31c4d159ead503adf49f848062097598724a8899828ae1914caa0c108293 | Triage

Sharing

General

Target

ffad31c4d159ead503adf49f848062097598724a8899828ae1914caa0c108293
Size

327KB
Sample

221123-hn34hseb66
MD5

bcae50a9cdebef36ccd622e29f481e80
SHA1

6d11aeb51b0a09c575d8282951ca0993b7365306
SHA256

ffad31c4d159ead503adf49f848062097598724a8899828ae1914caa0c108293
SHA512

be150615722a0423b67d5516bdef04119415991b9ee9436fe765963dc143ca0ac05f13624e037c6971948f53813646167c5308977659197045184c20348d1e64
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fc:Jr4iu6/eIo4Rsw33AtsmQp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ffad31c4d159ead503adf49f848062097598724a8899828ae1914caa0c108293
- Size
  
  327KB
- MD5
  
  bcae50a9cdebef36ccd622e29f481e80
- SHA1
  
  6d11aeb51b0a09c575d8282951ca0993b7365306
- SHA256
  
  ffad31c4d159ead503adf49f848062097598724a8899828ae1914caa0c108293
- SHA512
  
  be150615722a0423b67d5516bdef04119415991b9ee9436fe765963dc143ca0ac05f13624e037c6971948f53813646167c5308977659197045184c20348d1e64
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fc:Jr4iu6/eIo4Rsw33AtsmQp
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2