ad17c2ce6b440290a9c13866160870d069ed132a0b1e42e9efb85a81d054d5a8 | Triage

Sharing

General

Target

ad17c2ce6b440290a9c13866160870d069ed132a0b1e42e9efb85a81d054d5a8
Size

231KB
Sample

221128-gfpeqaac27
MD5

80b45c50a615192b42c3cdf3fd627d28
SHA1

62def8d00dddd2a138662b06151e61307b30d375
SHA256

ad17c2ce6b440290a9c13866160870d069ed132a0b1e42e9efb85a81d054d5a8
SHA512

85da2dc480e9065a895bc0c8509f9e29fe9aae41a6ce4974d2485d2f9f4edbfdd5ce9db57417ace674019864c292ccd732d3b68a2e8d06e505bf31d8c3e2ecc5
SSDEEP

3072:rw2KoqRpxhf5BrswjRSFZXIYOs430UT4cr0ze6fHGsicB/5M5OITH:crPNBr7VYIYO3Niei5/5qVH

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  ad17c2ce6b440290a9c13866160870d069ed132a0b1e42e9efb85a81d054d5a8
- Size
  
  231KB
- MD5
  
  80b45c50a615192b42c3cdf3fd627d28
- SHA1
  
  62def8d00dddd2a138662b06151e61307b30d375
- SHA256
  
  ad17c2ce6b440290a9c13866160870d069ed132a0b1e42e9efb85a81d054d5a8
- SHA512
  
  85da2dc480e9065a895bc0c8509f9e29fe9aae41a6ce4974d2485d2f9f4edbfdd5ce9db57417ace674019864c292ccd732d3b68a2e8d06e505bf31d8c3e2ecc5
- SSDEEP
  
  3072:rw2KoqRpxhf5BrswjRSFZXIYOs430UT4cr0ze6fHGsicB/5M5OITH:crPNBr7VYIYO3Niei5/5qVH
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2