bf6dc36a13e42ac24f92e7c8756abd28ea23d461eea9afabcb60648d5a788493 | Triage

Sharing

General

Target

bf6dc36a13e42ac24f92e7c8756abd28ea23d461eea9afabcb60648d5a788493
Size

313KB
Sample

221123-jjg6xsah9y
MD5

ad44cd359b25fad7a9f8ffddc5459b6c
SHA1

e952ef2258d7a764f27c0d58f1028f21f5c40528
SHA256

bf6dc36a13e42ac24f92e7c8756abd28ea23d461eea9afabcb60648d5a788493
SHA512

c80a3741236b23cee3e7dfab3822df23b358548904f5bcce97818bc0735ca1c151bb13786a1d1fc141c26bd79b8d056f985e0ffce3d56ea6d0af47805695e195
SSDEEP

6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYH:4rk4u6/eIo4nlu7trxFtApfgMyrpjYH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bf6dc36a13e42ac24f92e7c8756abd28ea23d461eea9afabcb60648d5a788493
- Size
  
  313KB
- MD5
  
  ad44cd359b25fad7a9f8ffddc5459b6c
- SHA1
  
  e952ef2258d7a764f27c0d58f1028f21f5c40528
- SHA256
  
  bf6dc36a13e42ac24f92e7c8756abd28ea23d461eea9afabcb60648d5a788493
- SHA512
  
  c80a3741236b23cee3e7dfab3822df23b358548904f5bcce97818bc0735ca1c151bb13786a1d1fc141c26bd79b8d056f985e0ffce3d56ea6d0af47805695e195
- SSDEEP
  
  6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYH:4rk4u6/eIo4nlu7trxFtApfgMyrpjYH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2