bbf88fe7b80408ee2524f667dad2bb4ac7e890ebde5724a1e9395750d05af89f | Triage

Sharing

General

Target

bbf88fe7b80408ee2524f667dad2bb4ac7e890ebde5724a1e9395750d05af89f
Size

36KB
Sample

221203-rly68abh6x
MD5

cb31e6a553869c94e2bfc74396279512
SHA1

b1ce7c5d595b39cda5a0dc48377cb299c4603801
SHA256

bbf88fe7b80408ee2524f667dad2bb4ac7e890ebde5724a1e9395750d05af89f
SHA512

fbd1c4277d17660c2fb4d576b721ef7058fe117771dc72974718d036f37774faecc4b84a08e6a435ac01288cdbcdf141b4d5794b40609736e3b462abb3323179
SSDEEP

384:pJEKyf3ZEMs4Mphzji0aXIP7Z99JBu5cw:fEPf3cHT97V3Oc

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  bbf88fe7b80408ee2524f667dad2bb4ac7e890ebde5724a1e9395750d05af89f
- Size
  
  36KB
- MD5
  
  cb31e6a553869c94e2bfc74396279512
- SHA1
  
  b1ce7c5d595b39cda5a0dc48377cb299c4603801
- SHA256
  
  bbf88fe7b80408ee2524f667dad2bb4ac7e890ebde5724a1e9395750d05af89f
- SHA512
  
  fbd1c4277d17660c2fb4d576b721ef7058fe117771dc72974718d036f37774faecc4b84a08e6a435ac01288cdbcdf141b4d5794b40609736e3b462abb3323179
- SSDEEP
  
  384:pJEKyf3ZEMs4Mphzji0aXIP7Z99JBu5cw:fEPf3cHT97V3Oc
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2