f31f2226389522c634a06291d733b3cbfc904450a6af68570f01c4e6751f786f | Triage

Sharing

General

Target

f31f2226389522c634a06291d733b3cbfc904450a6af68570f01c4e6751f786f
Size

316KB
Sample

221127-3enmpafh56
MD5

025f338735606842358f0f5a58458685
SHA1

0ac2952908e8ae96be4fd6c581d21eab1b9462e9
SHA256

f31f2226389522c634a06291d733b3cbfc904450a6af68570f01c4e6751f786f
SHA512

69b5ea7a3adbcea0640e7e428448a6355b8117dee938d767e0b1320c5bbc561a3a84f3f9574ff49daa7c55956fae76122d8050f3a7994b1144a4ce9b20095c85
SSDEEP

6144:iribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xS:ir7kuveY33FJUo7MDkA6H

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f31f2226389522c634a06291d733b3cbfc904450a6af68570f01c4e6751f786f
- Size
  
  316KB
- MD5
  
  025f338735606842358f0f5a58458685
- SHA1
  
  0ac2952908e8ae96be4fd6c581d21eab1b9462e9
- SHA256
  
  f31f2226389522c634a06291d733b3cbfc904450a6af68570f01c4e6751f786f
- SHA512
  
  69b5ea7a3adbcea0640e7e428448a6355b8117dee938d767e0b1320c5bbc561a3a84f3f9574ff49daa7c55956fae76122d8050f3a7994b1144a4ce9b20095c85
- SSDEEP
  
  6144:iribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xS:ir7kuveY33FJUo7MDkA6H
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2