aeafe484bfba24c40c8bc713eb6c3ab21c5bbfc2a26e69b340b2a128daadf350 | Triage

Sharing

General

Target

aeafe484bfba24c40c8bc713eb6c3ab21c5bbfc2a26e69b340b2a128daadf350
Size

318KB
Sample

221123-kxh6tahg33
MD5

321dd766f079f41a4c718454aa85b238
SHA1

839e1de208d8bb5ffc2c27febc717d382e33e854
SHA256

aeafe484bfba24c40c8bc713eb6c3ab21c5bbfc2a26e69b340b2a128daadf350
SHA512

2a2522abe37256d265d7724f443371150bed40af225fb73f31d97c4f84fb4bd18f4d0f59ded1c96e6e50985bf48b208b09c7c176c52d8c622d3984aaea574850
SSDEEP

6144:rr4O9uEo2S1YnQmCX492DkwNP3qpYFjidYD7idoZ05wOgKBAzo:rr4Gu6/eIo4YWlqfhKBAzo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  aeafe484bfba24c40c8bc713eb6c3ab21c5bbfc2a26e69b340b2a128daadf350
- Size
  
  318KB
- MD5
  
  321dd766f079f41a4c718454aa85b238
- SHA1
  
  839e1de208d8bb5ffc2c27febc717d382e33e854
- SHA256
  
  aeafe484bfba24c40c8bc713eb6c3ab21c5bbfc2a26e69b340b2a128daadf350
- SHA512
  
  2a2522abe37256d265d7724f443371150bed40af225fb73f31d97c4f84fb4bd18f4d0f59ded1c96e6e50985bf48b208b09c7c176c52d8c622d3984aaea574850
- SSDEEP
  
  6144:rr4O9uEo2S1YnQmCX492DkwNP3qpYFjidYD7idoZ05wOgKBAzo:rr4Gu6/eIo4YWlqfhKBAzo
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2