bf8cb8905c16fcfcf461c3cbbbc1b1fffedb5a0f08f772d10eba2decfa5f49ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf8cb8905c16fcfcf461c3cbbbc1b1fffedb5a0f08f772d10eba2decfa5f49ec
Size

327KB
Sample

221127-3ft6vsca6w
MD5

d618736c89007d39168b37ae99a0c5ce
SHA1

a35164e110dbcb8d6371676d9892726ebcd3a63e
SHA256

bf8cb8905c16fcfcf461c3cbbbc1b1fffedb5a0f08f772d10eba2decfa5f49ec
SHA512

61cd1600278c7542d37fa85acdcc725b4db08a6d4fd18d8c54e165282fc28d51fa4736f573047cce2ccab5c567a9a5641110f56ed7b85f77d45b46ccb4c5c7b2
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FU:Rr4iu6/eIo4Rsw33AtsmQ5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bf8cb8905c16fcfcf461c3cbbbc1b1fffedb5a0f08f772d10eba2decfa5f49ec
- Size
  
  327KB
- MD5
  
  d618736c89007d39168b37ae99a0c5ce
- SHA1
  
  a35164e110dbcb8d6371676d9892726ebcd3a63e
- SHA256
  
  bf8cb8905c16fcfcf461c3cbbbc1b1fffedb5a0f08f772d10eba2decfa5f49ec
- SHA512
  
  61cd1600278c7542d37fa85acdcc725b4db08a6d4fd18d8c54e165282fc28d51fa4736f573047cce2ccab5c567a9a5641110f56ed7b85f77d45b46ccb4c5c7b2
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FU:Rr4iu6/eIo4Rsw33AtsmQ5
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2