ffee9c307e709b6e59d5349cf2dfc0634bb839414ab355c6839ec5ff3bec7ae9 | Triage

Sharing

General

Target

ffee9c307e709b6e59d5349cf2dfc0634bb839414ab355c6839ec5ff3bec7ae9
Size

326KB
Sample

221123-hnxazahf7x
MD5

075391d1e4b0f19af65c29c4107b14d1
SHA1

c3b2b0023d5c05a5d8f7e9e83487da04e4512f43
SHA256

ffee9c307e709b6e59d5349cf2dfc0634bb839414ab355c6839ec5ff3bec7ae9
SHA512

f05202fae0169fab9cf10d857a1bcd8171e06269e1f05deac23bbe2832795ac3a059b1df08366408232f5f80eb93a60dda61e6fcc09cbaec0d0cb663eb568d4d
SSDEEP

6144:Sr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clg7:Sr4gu6/eIo4nULZKMRwxuPfk6j

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ffee9c307e709b6e59d5349cf2dfc0634bb839414ab355c6839ec5ff3bec7ae9
- Size
  
  326KB
- MD5
  
  075391d1e4b0f19af65c29c4107b14d1
- SHA1
  
  c3b2b0023d5c05a5d8f7e9e83487da04e4512f43
- SHA256
  
  ffee9c307e709b6e59d5349cf2dfc0634bb839414ab355c6839ec5ff3bec7ae9
- SHA512
  
  f05202fae0169fab9cf10d857a1bcd8171e06269e1f05deac23bbe2832795ac3a059b1df08366408232f5f80eb93a60dda61e6fcc09cbaec0d0cb663eb568d4d
- SSDEEP
  
  6144:Sr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clg7:Sr4gu6/eIo4nULZKMRwxuPfk6j
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2