ad0fe04c5cf96dd5034acfce7e70de3872b6480dedc98d14ff038d3e26f3a8ff | Triage

Sharing

General

Target

ad0fe04c5cf96dd5034acfce7e70de3872b6480dedc98d14ff038d3e26f3a8ff
Size

304KB
Sample

221128-grxv8sba74
MD5

313c2c5deac25172cd917807f84e756c
SHA1

10f96f690e326e40f472a216fddebd94dee5726f
SHA256

ad0fe04c5cf96dd5034acfce7e70de3872b6480dedc98d14ff038d3e26f3a8ff
SHA512

e71370764297e550b8bbb158488a49eb7117b463aaa5373d961deee25c72090c9e48a99883c6fbe03e4537dca2dcaf029be2cf2a42978755fec2da1b26dae7cc
SSDEEP

6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPK:lrkuu6/eIo4tQW62T+uTwM6YVxm24K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ad0fe04c5cf96dd5034acfce7e70de3872b6480dedc98d14ff038d3e26f3a8ff
- Size
  
  304KB
- MD5
  
  313c2c5deac25172cd917807f84e756c
- SHA1
  
  10f96f690e326e40f472a216fddebd94dee5726f
- SHA256
  
  ad0fe04c5cf96dd5034acfce7e70de3872b6480dedc98d14ff038d3e26f3a8ff
- SHA512
  
  e71370764297e550b8bbb158488a49eb7117b463aaa5373d961deee25c72090c9e48a99883c6fbe03e4537dca2dcaf029be2cf2a42978755fec2da1b26dae7cc
- SSDEEP
  
  6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPK:lrkuu6/eIo4tQW62T+uTwM6YVxm24K
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2