cff2cf43b288b49b8f7c72e7ad2f1a5fb4bbea00a20671f5a14a72b5c394e3d4 | Triage

Sharing

General

Target

cff2cf43b288b49b8f7c72e7ad2f1a5fb4bbea00a20671f5a14a72b5c394e3d4
Size

304KB
Sample

221128-ere93sdf63
MD5

d73be1dde91a411d2a24d560b92d9539
SHA1

ee39a0ac33ab5111e72df44953da72f805a6a3e9
SHA256

cff2cf43b288b49b8f7c72e7ad2f1a5fb4bbea00a20671f5a14a72b5c394e3d4
SHA512

7fe0851f910fe91c94513ca2926b79a9581200d100144433ce935ca258144504d091bf4bff5ccd03e8ff3ce130a1dd5e89b2e0587b62189c0156738b75bb9496
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPD:Nrkuu6/eIo4tQW62T+uTwM6YVxm24D

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cff2cf43b288b49b8f7c72e7ad2f1a5fb4bbea00a20671f5a14a72b5c394e3d4
- Size
  
  304KB
- MD5
  
  d73be1dde91a411d2a24d560b92d9539
- SHA1
  
  ee39a0ac33ab5111e72df44953da72f805a6a3e9
- SHA256
  
  cff2cf43b288b49b8f7c72e7ad2f1a5fb4bbea00a20671f5a14a72b5c394e3d4
- SHA512
  
  7fe0851f910fe91c94513ca2926b79a9581200d100144433ce935ca258144504d091bf4bff5ccd03e8ff3ce130a1dd5e89b2e0587b62189c0156738b75bb9496
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPD:Nrkuu6/eIo4tQW62T+uTwM6YVxm24D
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2