8f3281aa3ff537d8313ff51fadeef9da66895c999fb0afbcee23b1c93fc9cc91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f3281aa3ff537d8313ff51fadeef9da66895c999fb0afbcee23b1c93fc9cc91
Size

318KB
Sample

221127-31njtadf5t
MD5

f485c6bdb00fb10244205ce61504ad4f
SHA1

62b534af66ed9e779e1f61a9bfbd9b072a33ce2f
SHA256

8f3281aa3ff537d8313ff51fadeef9da66895c999fb0afbcee23b1c93fc9cc91
SHA512

119d96b69c7c0418e6b6ae761c3586e884575899725d6b99b9f832f308439f7fa24b1ee8a1611b7d1fe5424ccb9fa6148a297c4559615fa8efe565e86b807e9d
SSDEEP

6144:Er5bUzkuvcBYC47l2xGUIWhDcFHgO4nIcsKY3SLiF:ErqkuveY3EdDcNgtIrKY3ii

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8f3281aa3ff537d8313ff51fadeef9da66895c999fb0afbcee23b1c93fc9cc91
- Size
  
  318KB
- MD5
  
  f485c6bdb00fb10244205ce61504ad4f
- SHA1
  
  62b534af66ed9e779e1f61a9bfbd9b072a33ce2f
- SHA256
  
  8f3281aa3ff537d8313ff51fadeef9da66895c999fb0afbcee23b1c93fc9cc91
- SHA512
  
  119d96b69c7c0418e6b6ae761c3586e884575899725d6b99b9f832f308439f7fa24b1ee8a1611b7d1fe5424ccb9fa6148a297c4559615fa8efe565e86b807e9d
- SSDEEP
  
  6144:Er5bUzkuvcBYC47l2xGUIWhDcFHgO4nIcsKY3SLiF:ErqkuveY3EdDcNgtIrKY3ii
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2