bd76fa99cf14908d493ef946c34063d7d22ad9c2428366e2c153631be5503bd8 | Triage

Sharing

General

Target

bd76fa99cf14908d493ef946c34063d7d22ad9c2428366e2c153631be5503bd8
Size

313KB
Sample

221127-zbf7nafh22
MD5

1d7077fc841068da2064e22b17763971
SHA1

e55ae56d1bb253ccf06a3cacd0ac777b3bd88234
SHA256

bd76fa99cf14908d493ef946c34063d7d22ad9c2428366e2c153631be5503bd8
SHA512

34551bc30429f86a1e0e934bd92e9e45d7afa0cb754ed6f0890bfa1fd39cb307b464d2f6f1a25003e2a37322ddece933fd6e6bfd67c73a3101a7774fd2a72355
SSDEEP

6144:CrkP9uEo2S1YnQmCX492DkwNP3qpYFpdteedaMtBxOWUevASojincBSu:CrkFu6/eIo4mdt2M/lUevAzicp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bd76fa99cf14908d493ef946c34063d7d22ad9c2428366e2c153631be5503bd8
- Size
  
  313KB
- MD5
  
  1d7077fc841068da2064e22b17763971
- SHA1
  
  e55ae56d1bb253ccf06a3cacd0ac777b3bd88234
- SHA256
  
  bd76fa99cf14908d493ef946c34063d7d22ad9c2428366e2c153631be5503bd8
- SHA512
  
  34551bc30429f86a1e0e934bd92e9e45d7afa0cb754ed6f0890bfa1fd39cb307b464d2f6f1a25003e2a37322ddece933fd6e6bfd67c73a3101a7774fd2a72355
- SSDEEP
  
  6144:CrkP9uEo2S1YnQmCX492DkwNP3qpYFpdteedaMtBxOWUevASojincBSu:CrkFu6/eIo4mdt2M/lUevAzicp
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2