0f467a27d6c48443098be4735df3fe7a3744000a2902ccff260d562a11650e99 | Triage

Sharing

General

Target

0f467a27d6c48443098be4735df3fe7a3744000a2902ccff260d562a11650e99
Size

313KB
Sample

221125-zjad3sea22
MD5

f432626ae789dd2699dbef2f397e158a
SHA1

c1faf91428b94f8576f3f671b7f378f39de3c80a
SHA256

0f467a27d6c48443098be4735df3fe7a3744000a2902ccff260d562a11650e99
SHA512

538e5d1452395ef11699a265d257f1ebc978457830f523dc144ae38811907094d40dad14034926bca6d1dd016ef269464b1aedc6611c2a2774915cd98a160b3f
SSDEEP

6144:nrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMp:nrRu6/eIo4t3PuFITKUAm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0f467a27d6c48443098be4735df3fe7a3744000a2902ccff260d562a11650e99
- Size
  
  313KB
- MD5
  
  f432626ae789dd2699dbef2f397e158a
- SHA1
  
  c1faf91428b94f8576f3f671b7f378f39de3c80a
- SHA256
  
  0f467a27d6c48443098be4735df3fe7a3744000a2902ccff260d562a11650e99
- SHA512
  
  538e5d1452395ef11699a265d257f1ebc978457830f523dc144ae38811907094d40dad14034926bca6d1dd016ef269464b1aedc6611c2a2774915cd98a160b3f
- SSDEEP
  
  6144:nrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMp:nrRu6/eIo4t3PuFITKUAm
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2