af9954d5a6e3b1b769857ee5ae96baeac550109d87b525e1b2e3ce185307567d | Triage

Sharing

General

Target

af9954d5a6e3b1b769857ee5ae96baeac550109d87b525e1b2e3ce185307567d
Size

313KB
Sample

221123-jrfcasbc6x
MD5

c22d789ae722b6c129819898036f369e
SHA1

c0b3f54b9f6e0649d7bb08f7219ffac50faedaa5
SHA256

af9954d5a6e3b1b769857ee5ae96baeac550109d87b525e1b2e3ce185307567d
SHA512

f98c38ae273262bb6c38c4eaad7c556be475f0db115f4ffb12256bdd44412b288c1e6b71fa8db57b2c647f447fa529ce24a71517f4d108cf4f8a3735b11b6468
SSDEEP

6144:Xrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMA:XrRu6/eIo4t3PuFITKUA/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  af9954d5a6e3b1b769857ee5ae96baeac550109d87b525e1b2e3ce185307567d
- Size
  
  313KB
- MD5
  
  c22d789ae722b6c129819898036f369e
- SHA1
  
  c0b3f54b9f6e0649d7bb08f7219ffac50faedaa5
- SHA256
  
  af9954d5a6e3b1b769857ee5ae96baeac550109d87b525e1b2e3ce185307567d
- SHA512
  
  f98c38ae273262bb6c38c4eaad7c556be475f0db115f4ffb12256bdd44412b288c1e6b71fa8db57b2c647f447fa529ce24a71517f4d108cf4f8a3735b11b6468
- SSDEEP
  
  6144:Xrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMA:XrRu6/eIo4t3PuFITKUA/
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2