f80ab08b1a0ff770068d0562ba760ef1e21fb40dea60aa52d88c2f0c0a9fa242 | Triage

Sharing

General

Target

f80ab08b1a0ff770068d0562ba760ef1e21fb40dea60aa52d88c2f0c0a9fa242
Size

327KB
Sample

221123-hr2d4aec84
MD5

b33ba05ddec217ebba32313144246530
SHA1

fb61c08dea7bc9396edd576390460c7b3423855d
SHA256

f80ab08b1a0ff770068d0562ba760ef1e21fb40dea60aa52d88c2f0c0a9fa242
SHA512

602452ca25cb2e133a764cf3e0d9626f94504dbfe8a5b286234ecf03d33608561cb97a552fe75b13929d1bd2dfb060200156d7651eb02351baa9a95caad3b846
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fr:Rr4iu6/eIo4Rsw33AtsmQu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f80ab08b1a0ff770068d0562ba760ef1e21fb40dea60aa52d88c2f0c0a9fa242
- Size
  
  327KB
- MD5
  
  b33ba05ddec217ebba32313144246530
- SHA1
  
  fb61c08dea7bc9396edd576390460c7b3423855d
- SHA256
  
  f80ab08b1a0ff770068d0562ba760ef1e21fb40dea60aa52d88c2f0c0a9fa242
- SHA512
  
  602452ca25cb2e133a764cf3e0d9626f94504dbfe8a5b286234ecf03d33608561cb97a552fe75b13929d1bd2dfb060200156d7651eb02351baa9a95caad3b846
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fr:Rr4iu6/eIo4Rsw33AtsmQu
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2