fa379ebe39f189ca71c16714ffa4f769a82d189769dbc9197f980982ed466419 | Triage

Sharing

General

Target

fa379ebe39f189ca71c16714ffa4f769a82d189769dbc9197f980982ed466419
Size

319KB
Sample

221124-t5lfksff44
MD5

e5452ae4c2c35326f449aa329936890c
SHA1

cf841a82c8de499faba0a70783c6c77fb86e60cc
SHA256

fa379ebe39f189ca71c16714ffa4f769a82d189769dbc9197f980982ed466419
SHA512

22cc18653c97b6927c167d67eae5cff953cea8deb8e8b38a98b1be8ab01b47a9ca23e56dc5c57378a42617ef3acb5c32b0eb35ee95fc562873f80e4a2564e3f1
SSDEEP

3072:soXc5FMRqnRNvAZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ+ZZZZZZZZZZZZZZr:9kRNv+GIIIIIIIhIIIIIIIIIIIIIIIU

Score

10^/10

Malware Config

Extracted

Credentials

Protocol: ftp
Host:
31.220.16.214
Port:
21
Username:
u618253978
Password:
kiki1234

Targets

- Target
  
  fa379ebe39f189ca71c16714ffa4f769a82d189769dbc9197f980982ed466419
- Size
  
  319KB
- MD5
  
  e5452ae4c2c35326f449aa329936890c
- SHA1
  
  cf841a82c8de499faba0a70783c6c77fb86e60cc
- SHA256
  
  fa379ebe39f189ca71c16714ffa4f769a82d189769dbc9197f980982ed466419
- SHA512
  
  22cc18653c97b6927c167d67eae5cff953cea8deb8e8b38a98b1be8ab01b47a9ca23e56dc5c57378a42617ef3acb5c32b0eb35ee95fc562873f80e4a2564e3f1
- SSDEEP
  
  3072:soXc5FMRqnRNvAZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ+ZZZZZZZZZZZZZZr:9kRNv+GIIIIIIIhIIIIIIIIIIIIIIIU
Score

10^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2