ffc76c736fc489ea689b07babd2370bcec3c71e06f6eb3a910397e212a7bb384 | Triage

Sharing

General

Target

ffc76c736fc489ea689b07babd2370bcec3c71e06f6eb3a910397e212a7bb384
Size

315KB
Sample

221123-hnzq4aeb63
MD5

94eae5cd031f6d4b52002b858a4b9caf
SHA1

c182ddbe789c3757598288c12c167cb7f95a3f07
SHA256

ffc76c736fc489ea689b07babd2370bcec3c71e06f6eb3a910397e212a7bb384
SHA512

3db20ce8c9afdfeac99d3020620367a797b2e91596a0a9ea49582e08345a50e09f9fd434ce3b9a839ee7d3a9bace4057bd318ec7601b5bed23276981bd88587d
SSDEEP

6144:srYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZZ:srdkuveY3CvI5Zdkj6OEu1HSZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ffc76c736fc489ea689b07babd2370bcec3c71e06f6eb3a910397e212a7bb384
- Size
  
  315KB
- MD5
  
  94eae5cd031f6d4b52002b858a4b9caf
- SHA1
  
  c182ddbe789c3757598288c12c167cb7f95a3f07
- SHA256
  
  ffc76c736fc489ea689b07babd2370bcec3c71e06f6eb3a910397e212a7bb384
- SHA512
  
  3db20ce8c9afdfeac99d3020620367a797b2e91596a0a9ea49582e08345a50e09f9fd434ce3b9a839ee7d3a9bace4057bd318ec7601b5bed23276981bd88587d
- SSDEEP
  
  6144:srYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZZ:srdkuveY3CvI5Zdkj6OEu1HSZ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2