af6cd0147afc0b54f03e5a42937bbce8dbf17886d74fc9e3e74b5c9751cff0d9 | Triage

Sharing

General

Target

af6cd0147afc0b54f03e5a42937bbce8dbf17886d74fc9e3e74b5c9751cff0d9
Size

312KB
Sample

221123-jrhsesbc61
MD5

d12f1fe7623e6a72eeba875eff5c3a08
SHA1

fdc2a9d89afcf73b4102c362c429fe5268bcc08a
SHA256

af6cd0147afc0b54f03e5a42937bbce8dbf17886d74fc9e3e74b5c9751cff0d9
SHA512

184777eda40819f0d7917e93e3d3f354d4b670731fbd68a604db37a9381f0d94d978ef7c3694be37c2756fe5bd015285bf6a732cd8a2b551e0cd8f3e916a4706
SSDEEP

6144:UrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzc:Urfu6/eIo4XwlWKM231t5UnRr3DdRp5p

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  af6cd0147afc0b54f03e5a42937bbce8dbf17886d74fc9e3e74b5c9751cff0d9
- Size
  
  312KB
- MD5
  
  d12f1fe7623e6a72eeba875eff5c3a08
- SHA1
  
  fdc2a9d89afcf73b4102c362c429fe5268bcc08a
- SHA256
  
  af6cd0147afc0b54f03e5a42937bbce8dbf17886d74fc9e3e74b5c9751cff0d9
- SHA512
  
  184777eda40819f0d7917e93e3d3f354d4b670731fbd68a604db37a9381f0d94d978ef7c3694be37c2756fe5bd015285bf6a732cd8a2b551e0cd8f3e916a4706
- SSDEEP
  
  6144:UrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzc:Urfu6/eIo4XwlWKM231t5UnRr3DdRp5p
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2