ad8a7fa429283686597f0514285dd4b3bf8ce084675f7a65850691d724a1ec7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad8a7fa429283686597f0514285dd4b3bf8ce084675f7a65850691d724a1ec7d
Size

314KB
Sample

221128-bl69tshc81
MD5

4deb14bc4ba83dbba25919049272e984
SHA1

a2c3ff85f800d5e3487e0c96cf5f5aa1d0ef41c6
SHA256

ad8a7fa429283686597f0514285dd4b3bf8ce084675f7a65850691d724a1ec7d
SHA512

79ef100d5cc1559818070f02c40573e1463d05f737cba076f87fd9412342cadbbf97ce0af9a380e63a35737b80e84e27c5b01e7289ff608e8ee22f122758ce91
SSDEEP

6144:YrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwT:Yr1kuveY35YO67Wxz7wT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ad8a7fa429283686597f0514285dd4b3bf8ce084675f7a65850691d724a1ec7d
- Size
  
  314KB
- MD5
  
  4deb14bc4ba83dbba25919049272e984
- SHA1
  
  a2c3ff85f800d5e3487e0c96cf5f5aa1d0ef41c6
- SHA256
  
  ad8a7fa429283686597f0514285dd4b3bf8ce084675f7a65850691d724a1ec7d
- SHA512
  
  79ef100d5cc1559818070f02c40573e1463d05f737cba076f87fd9412342cadbbf97ce0af9a380e63a35737b80e84e27c5b01e7289ff608e8ee22f122758ce91
- SSDEEP
  
  6144:YrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwT:Yr1kuveY35YO67Wxz7wT
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2