bf007b084e91fee5c0f0b7411179853eb2395ce37430292c9ded3e33b587bf2a | Triage

Sharing

General

Target

bf007b084e91fee5c0f0b7411179853eb2395ce37430292c9ded3e33b587bf2a
Size

313KB
Sample

221123-jjmfmsff25
MD5

76e1c4be86bc2a5bb1c65c9ef4e9da3e
SHA1

86772c46b79d6eb5b721addefd65fc0f42969c12
SHA256

bf007b084e91fee5c0f0b7411179853eb2395ce37430292c9ded3e33b587bf2a
SHA512

e24f327064a87a888192a80c782c0bcf5e12c5ad2370f17d4529dacf2ae2843afc7833b5dd97ffcda7dd69d6963c058adb2d31add985c6f140a113c00a714924
SSDEEP

6144:orkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijY2:ork4u6/eIo4nlu7trxFtApfgMyrpjY2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bf007b084e91fee5c0f0b7411179853eb2395ce37430292c9ded3e33b587bf2a
- Size
  
  313KB
- MD5
  
  76e1c4be86bc2a5bb1c65c9ef4e9da3e
- SHA1
  
  86772c46b79d6eb5b721addefd65fc0f42969c12
- SHA256
  
  bf007b084e91fee5c0f0b7411179853eb2395ce37430292c9ded3e33b587bf2a
- SHA512
  
  e24f327064a87a888192a80c782c0bcf5e12c5ad2370f17d4529dacf2ae2843afc7833b5dd97ffcda7dd69d6963c058adb2d31add985c6f140a113c00a714924
- SSDEEP
  
  6144:orkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijY2:ork4u6/eIo4nlu7trxFtApfgMyrpjY2
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2