af94bd15e6878902c0b5e54c265d2fabdc698ea0cf691c369b8525c7c5d9ff8d | Triage

Sharing

General

Target

af94bd15e6878902c0b5e54c265d2fabdc698ea0cf691c369b8525c7c5d9ff8d
Size

313KB
Sample

221123-jrfytsbc6y
MD5

ad07504b35d0d2255bd25529eb4d3ab6
SHA1

e1e0e8b0a93cd3037c77c3daa5ed8999bf5b0ced
SHA256

af94bd15e6878902c0b5e54c265d2fabdc698ea0cf691c369b8525c7c5d9ff8d
SHA512

c620e711eb4c9ad4a9d9a7167fc40b7196425b8323aa08e381ea47ceec43874328d33ff479fa63fe5c61edda5ca1fcc111601204fa911b541b344ee647b2b99f
SSDEEP

6144:ErK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LE:Eryu6/eIo4vMResyEf0uP9d9UG0E

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  af94bd15e6878902c0b5e54c265d2fabdc698ea0cf691c369b8525c7c5d9ff8d
- Size
  
  313KB
- MD5
  
  ad07504b35d0d2255bd25529eb4d3ab6
- SHA1
  
  e1e0e8b0a93cd3037c77c3daa5ed8999bf5b0ced
- SHA256
  
  af94bd15e6878902c0b5e54c265d2fabdc698ea0cf691c369b8525c7c5d9ff8d
- SHA512
  
  c620e711eb4c9ad4a9d9a7167fc40b7196425b8323aa08e381ea47ceec43874328d33ff479fa63fe5c61edda5ca1fcc111601204fa911b541b344ee647b2b99f
- SSDEEP
  
  6144:ErK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LE:Eryu6/eIo4vMResyEf0uP9d9UG0E
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2