8210ed7f1a3d506ec956bb0d9b073d4b6a389d0f3fe57bb7e420c096abbcb427 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8210ed7f1a3d506ec956bb0d9b073d4b6a389d0f3fe57bb7e420c096abbcb427
Size

303KB
Sample

221206-tbhgtsbg65
MD5

1a6fb85018cc45f976f0e0d4c3ad852d
SHA1

f22a72535857ce1a8d1bfb63cd92fca07e85069d
SHA256

8210ed7f1a3d506ec956bb0d9b073d4b6a389d0f3fe57bb7e420c096abbcb427
SHA512

7499a12b8cf4a2c9c0c7291180fc3d9907678fb414faf86a3aa91c065030b4d0edabaad7d3c5456d00da3c5bfe8a6bd11f35d3f0413ce97e5aed8004835f8a11
SSDEEP

6144:orko9uEo2S1YnQmCX492DkwNP3qpYF2JA06CzL31tE5ioKpbgLoMmGvgk052lABC:orkAu6/eIo4R/P1EioKMbmGvgZ2lAB/a

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8210ed7f1a3d506ec956bb0d9b073d4b6a389d0f3fe57bb7e420c096abbcb427
- Size
  
  303KB
- MD5
  
  1a6fb85018cc45f976f0e0d4c3ad852d
- SHA1
  
  f22a72535857ce1a8d1bfb63cd92fca07e85069d
- SHA256
  
  8210ed7f1a3d506ec956bb0d9b073d4b6a389d0f3fe57bb7e420c096abbcb427
- SHA512
  
  7499a12b8cf4a2c9c0c7291180fc3d9907678fb414faf86a3aa91c065030b4d0edabaad7d3c5456d00da3c5bfe8a6bd11f35d3f0413ce97e5aed8004835f8a11
- SSDEEP
  
  6144:orko9uEo2S1YnQmCX492DkwNP3qpYF2JA06CzL31tE5ioKpbgLoMmGvgk052lABC:orkAu6/eIo4R/P1EioKMbmGvgZ2lAB/a
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2