28f2f6aab74cb24a86a8c1c1f44e51efd2a8a6127b07a9ae9da7ab7a9e353ae5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28f2f6aab74cb24a86a8c1c1f44e51efd2a8a6127b07a9ae9da7ab7a9e353ae5
Size

316KB
Sample

221128-arxf5sag62
MD5

f22df88053abd52720da614d0e9dcf9e
SHA1

705e52e3481a47ac1e736cb82da613aeb87b4cad
SHA256

28f2f6aab74cb24a86a8c1c1f44e51efd2a8a6127b07a9ae9da7ab7a9e353ae5
SHA512

3aaea3ebf64bce4df06cb4448f174bfd41480e192978aef4958841258bc7eebe40c30d2cafd7439415b8f0554293c7efb3acb70be1025df434491f890485d02c
SSDEEP

6144:rr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYoO:rr0kuveY3cY1cia66MGd0Vs9BdNPO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  28f2f6aab74cb24a86a8c1c1f44e51efd2a8a6127b07a9ae9da7ab7a9e353ae5
- Size
  
  316KB
- MD5
  
  f22df88053abd52720da614d0e9dcf9e
- SHA1
  
  705e52e3481a47ac1e736cb82da613aeb87b4cad
- SHA256
  
  28f2f6aab74cb24a86a8c1c1f44e51efd2a8a6127b07a9ae9da7ab7a9e353ae5
- SHA512
  
  3aaea3ebf64bce4df06cb4448f174bfd41480e192978aef4958841258bc7eebe40c30d2cafd7439415b8f0554293c7efb3acb70be1025df434491f890485d02c
- SSDEEP
  
  6144:rr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYoO:rr0kuveY3cY1cia66MGd0Vs9BdNPO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2