bf3f06540e63c0edede817cf27cb9f0d78606dd09828a6810f8391b99845a556 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf3f06540e63c0edede817cf27cb9f0d78606dd09828a6810f8391b99845a556
Size

304KB
Sample

221127-lml1dsfh26
MD5

39b2c72b94371874dd736bd0182b6e85
SHA1

02dd347e716c8dd395f5f2c3341c4306fff54c23
SHA256

bf3f06540e63c0edede817cf27cb9f0d78606dd09828a6810f8391b99845a556
SHA512

5b7d4663fedbc878a770f97a1b6fff5bbcee7862ea3eb2c08877534fbbe097c08ac79386a5716d01e4e2e8eab0d7687a78b1cfcfab19a62d78c8b758465f9e75
SSDEEP

6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPt:1rkuu6/eIo4tQW62T+uTwM6YVxm24t

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bf3f06540e63c0edede817cf27cb9f0d78606dd09828a6810f8391b99845a556
- Size
  
  304KB
- MD5
  
  39b2c72b94371874dd736bd0182b6e85
- SHA1
  
  02dd347e716c8dd395f5f2c3341c4306fff54c23
- SHA256
  
  bf3f06540e63c0edede817cf27cb9f0d78606dd09828a6810f8391b99845a556
- SHA512
  
  5b7d4663fedbc878a770f97a1b6fff5bbcee7862ea3eb2c08877534fbbe097c08ac79386a5716d01e4e2e8eab0d7687a78b1cfcfab19a62d78c8b758465f9e75
- SSDEEP
  
  6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPt:1rkuu6/eIo4tQW62T+uTwM6YVxm24t
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2