f215a1717a2e33300f807620c0d4408cd64b0cb2027fde33fc18ef659bddd166 | Triage

Sharing

General

Target

f215a1717a2e33300f807620c0d4408cd64b0cb2027fde33fc18ef659bddd166
Size

72KB
Sample

221123-xgppwafa32
MD5

5225f39fafa37f1021b2b567961c00b5
SHA1

60c49afce11d56c843b849fac2a66d63eaac2969
SHA256

f215a1717a2e33300f807620c0d4408cd64b0cb2027fde33fc18ef659bddd166
SHA512

8bed228d4441032259357a56cf6b433b33519b247a5c03db26aed57573eebfc43d318e291a186ebdb7b7c120ce3bdf88f5c7c1a10bacc4e90501498555dfb565
SSDEEP

768:sNuEUSfcOzyzv8EH2VtwYMh+YpX3BVQNrQQMFY9cGQhQpXpL5XKKKKKKKKKRTP:sNu9s/yzffeMFYSQJZxKKKKKKKKKRL

Score

7^/10

Malware Config

Targets

- Target
  
  f215a1717a2e33300f807620c0d4408cd64b0cb2027fde33fc18ef659bddd166
- Size
  
  72KB
- MD5
  
  5225f39fafa37f1021b2b567961c00b5
- SHA1
  
  60c49afce11d56c843b849fac2a66d63eaac2969
- SHA256
  
  f215a1717a2e33300f807620c0d4408cd64b0cb2027fde33fc18ef659bddd166
- SHA512
  
  8bed228d4441032259357a56cf6b433b33519b247a5c03db26aed57573eebfc43d318e291a186ebdb7b7c120ce3bdf88f5c7c1a10bacc4e90501498555dfb565
- SSDEEP
  
  768:sNuEUSfcOzyzv8EH2VtwYMh+YpX3BVQNrQQMFY9cGQhQpXpL5XKKKKKKKKKRTP:sNu9s/yzffeMFYSQJZxKKKKKKKKKRL
Score

7^/10
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2