4bff6daf0aae3da100ed7ca1bb48a06e85ebe8c5c3ca69a0179825b071c95c12 | Triage

Sharing

General

Target

4bff6daf0aae3da100ed7ca1bb48a06e85ebe8c5c3ca69a0179825b071c95c12
Size

53KB
Sample

221123-xhjv1sfa79
MD5

4ff7b4c50a0f9106cf3cfd2d44de97a0
SHA1

27bf8acd6b26752070ae7a95d4589626cfd78e66
SHA256

4bff6daf0aae3da100ed7ca1bb48a06e85ebe8c5c3ca69a0179825b071c95c12
SHA512

788ab385dd4c92fddb5df058cac77eb2916068cbec9baabeb07114f830608e9cb4023846af30a6e3b76590ee69236e691d012cc0b1540dd5c25f1c400ae6c6db
SSDEEP

768:qivpm5wazR03BAornyV0pf1RiK/49OTr1mz5ONpjhkHIUJewOG:fvpmvl2nu0BxVAzUN1xge

Score

7^/10

Malware Config

Targets

- Target
  
  4bff6daf0aae3da100ed7ca1bb48a06e85ebe8c5c3ca69a0179825b071c95c12
- Size
  
  53KB
- MD5
  
  4ff7b4c50a0f9106cf3cfd2d44de97a0
- SHA1
  
  27bf8acd6b26752070ae7a95d4589626cfd78e66
- SHA256
  
  4bff6daf0aae3da100ed7ca1bb48a06e85ebe8c5c3ca69a0179825b071c95c12
- SHA512
  
  788ab385dd4c92fddb5df058cac77eb2916068cbec9baabeb07114f830608e9cb4023846af30a6e3b76590ee69236e691d012cc0b1540dd5c25f1c400ae6c6db
- SSDEEP
  
  768:qivpm5wazR03BAornyV0pf1RiK/49OTr1mz5ONpjhkHIUJewOG:fvpmvl2nu0BxVAzUN1xge
Score

7^/10
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2