af3826cb180cf268c4ff9341dce99706a308f399ad6c25af60f539bd29f74a28 | Triage

Sharing

General

Target

af3826cb180cf268c4ff9341dce99706a308f399ad6c25af60f539bd29f74a28
Size

322KB
Sample

221123-jrmflsfh84
MD5

aa1691d98fcfcaf500c0ac6403f333a0
SHA1

35268a420f4b5a5382c28723cf335955db5bd09d
SHA256

af3826cb180cf268c4ff9341dce99706a308f399ad6c25af60f539bd29f74a28
SHA512

43008c5d6f6ab5939b8f7c654fa59c1b5834251bb6ee7d375059de877c2f407130b12aed4bb1db77201508f769d885d60b4244be68aa5f44c5dd111395556e97
SSDEEP

6144:wrV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xcK:wrVQu6/eIo4qQdF8lEeXK11AZDqUmpK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  af3826cb180cf268c4ff9341dce99706a308f399ad6c25af60f539bd29f74a28
- Size
  
  322KB
- MD5
  
  aa1691d98fcfcaf500c0ac6403f333a0
- SHA1
  
  35268a420f4b5a5382c28723cf335955db5bd09d
- SHA256
  
  af3826cb180cf268c4ff9341dce99706a308f399ad6c25af60f539bd29f74a28
- SHA512
  
  43008c5d6f6ab5939b8f7c654fa59c1b5834251bb6ee7d375059de877c2f407130b12aed4bb1db77201508f769d885d60b4244be68aa5f44c5dd111395556e97
- SSDEEP
  
  6144:wrV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xcK:wrVQu6/eIo4qQdF8lEeXK11AZDqUmpK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2