8f09097cb3500bd233aa0aaa2590c325e87baf7d5116647c8299d11cf10a28fa | Triage

Sharing

General

Target

8f09097cb3500bd233aa0aaa2590c325e87baf7d5116647c8299d11cf10a28fa
Size

313KB
Sample

221124-d8e5zaaa6w
MD5

cff01a35c3788164c86b062c2a78ebd8
SHA1

e8286817772da8212d76d8a2294588fcd8322082
SHA256

8f09097cb3500bd233aa0aaa2590c325e87baf7d5116647c8299d11cf10a28fa
SHA512

d09f01cfdaea03b5bd39202da29e3abaa94869eefc7687977d58787216bb7451989f6c298a70a081c3ca9cc287250e8b150bf0cdca2110137b63296f8923fcb8
SSDEEP

6144:ErK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LH:Eryu6/eIo4vMResyEf0uP9d9UG0H

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8f09097cb3500bd233aa0aaa2590c325e87baf7d5116647c8299d11cf10a28fa
- Size
  
  313KB
- MD5
  
  cff01a35c3788164c86b062c2a78ebd8
- SHA1
  
  e8286817772da8212d76d8a2294588fcd8322082
- SHA256
  
  8f09097cb3500bd233aa0aaa2590c325e87baf7d5116647c8299d11cf10a28fa
- SHA512
  
  d09f01cfdaea03b5bd39202da29e3abaa94869eefc7687977d58787216bb7451989f6c298a70a081c3ca9cc287250e8b150bf0cdca2110137b63296f8923fcb8
- SSDEEP
  
  6144:ErK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LH:Eryu6/eIo4vMResyEf0uP9d9UG0H
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2