af9eeae9e01d1aa7171db475f7881fc2b6c0de18cfcabbd4cad5276878c4eb9f | Triage

Sharing

General

Target

af9eeae9e01d1aa7171db475f7881fc2b6c0de18cfcabbd4cad5276878c4eb9f
Size

304KB
Sample

221123-kxf2fsdb3t
MD5

b3b5ed093615c8fc6d47569c7d08fa74
SHA1

718e69dca74510cc9250964c725d6fd177c7faf8
SHA256

af9eeae9e01d1aa7171db475f7881fc2b6c0de18cfcabbd4cad5276878c4eb9f
SHA512

ecf41eff80bd35f79aa51655be3d9c4419f1e034b719627e8b14d4fecaecd0e1537daafb29f7c40a740bcfa300e41ab8b4ed4cacd76b9d2a757cf49a8677a70d
SSDEEP

6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPp:drkuu6/eIo4tQW62T+uTwM6YVxm24p

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  af9eeae9e01d1aa7171db475f7881fc2b6c0de18cfcabbd4cad5276878c4eb9f
- Size
  
  304KB
- MD5
  
  b3b5ed093615c8fc6d47569c7d08fa74
- SHA1
  
  718e69dca74510cc9250964c725d6fd177c7faf8
- SHA256
  
  af9eeae9e01d1aa7171db475f7881fc2b6c0de18cfcabbd4cad5276878c4eb9f
- SHA512
  
  ecf41eff80bd35f79aa51655be3d9c4419f1e034b719627e8b14d4fecaecd0e1537daafb29f7c40a740bcfa300e41ab8b4ed4cacd76b9d2a757cf49a8677a70d
- SSDEEP
  
  6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPp:drkuu6/eIo4tQW62T+uTwM6YVxm24p
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2