86ea07dfd2215f18845927c5b77254649fe2766e8cf07cf41fecf6e0f9cfe7ca | Triage

Sharing

General

Target

86ea07dfd2215f18845927c5b77254649fe2766e8cf07cf41fecf6e0f9cfe7ca
Size

315KB
Sample

221123-j12lwsgd29
MD5

af25a7242ed88ed28d83eab82d9cc6d8
SHA1

e411fc8d1e4697972981cb2dbfd16625ab05c465
SHA256

86ea07dfd2215f18845927c5b77254649fe2766e8cf07cf41fecf6e0f9cfe7ca
SHA512

718fbe20d1e023db2847e943ec5d2cbf1f65bcb9426189a9c05b9f8819eecc4d9eba031c3844f809795af5e7706a8e6f841603758c85f74a7e4c069e3244e862
SSDEEP

6144:2rYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5x:2rdkuveY36kjZP/XKxlSZAHk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  86ea07dfd2215f18845927c5b77254649fe2766e8cf07cf41fecf6e0f9cfe7ca
- Size
  
  315KB
- MD5
  
  af25a7242ed88ed28d83eab82d9cc6d8
- SHA1
  
  e411fc8d1e4697972981cb2dbfd16625ab05c465
- SHA256
  
  86ea07dfd2215f18845927c5b77254649fe2766e8cf07cf41fecf6e0f9cfe7ca
- SHA512
  
  718fbe20d1e023db2847e943ec5d2cbf1f65bcb9426189a9c05b9f8819eecc4d9eba031c3844f809795af5e7706a8e6f841603758c85f74a7e4c069e3244e862
- SSDEEP
  
  6144:2rYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5x:2rdkuveY36kjZP/XKxlSZAHk
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2