8f0da1d6bc8317a5172675f770a692f30f31cb2b192c989ccdfb4db344801343 | Triage

Sharing

General

Target

8f0da1d6bc8317a5172675f770a692f30f31cb2b192c989ccdfb4db344801343
Size

304KB
Sample

221128-erwbasdf85
MD5

9d7a0e7f8900be5d197f6a84ee3bd3fa
SHA1

9847dd4a0d973d558a296bcd7ba57430f05e7c06
SHA256

8f0da1d6bc8317a5172675f770a692f30f31cb2b192c989ccdfb4db344801343
SHA512

bd481e66843a84376de20ac7860c3cb344402f6abf2a3a0a64dc6b4f3d95493b24dd0369453883aa9eb6776dcfcef2cccd33f47cb9163b0823709f001e444cd3
SSDEEP

6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPO:lrkuu6/eIo4tQW62T+uTwM6YVxm24O

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8f0da1d6bc8317a5172675f770a692f30f31cb2b192c989ccdfb4db344801343
- Size
  
  304KB
- MD5
  
  9d7a0e7f8900be5d197f6a84ee3bd3fa
- SHA1
  
  9847dd4a0d973d558a296bcd7ba57430f05e7c06
- SHA256
  
  8f0da1d6bc8317a5172675f770a692f30f31cb2b192c989ccdfb4db344801343
- SHA512
  
  bd481e66843a84376de20ac7860c3cb344402f6abf2a3a0a64dc6b4f3d95493b24dd0369453883aa9eb6776dcfcef2cccd33f47cb9163b0823709f001e444cd3
- SSDEEP
  
  6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPO:lrkuu6/eIo4tQW62T+uTwM6YVxm24O
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2