99e43ffbc68a44c41b43515ba40a554a0d1dcb348ce1075d28f305a6dec26b1f | Triage

Sharing

General

Target

2024-11-21_b7cff84f85a9fd5e1c45a3cfd5af6fe9_avoslocker_luca-stealer_qakbot_revil
Size

3.1MB
Sample

241121-nvdebs1rgw
MD5

b7cff84f85a9fd5e1c45a3cfd5af6fe9
SHA1

286dc00b7a2a6a561269cbcc0e1480a1051c6959
SHA256

99e43ffbc68a44c41b43515ba40a554a0d1dcb348ce1075d28f305a6dec26b1f
SHA512

1aeffaa7b189d730430eb46bdc3bb5c651e9eddc6aa43fc48660eb89e110d20d059c821f2e68a94d15095d65aaa9d9ce636b3d6e30bed07b1949be94b54d1ba4
SSDEEP

98304:J+vJAYCRopGE8/8+YXWN5aqvmh69CEN6rV:0JA2p05tvmhIm

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_b7cff84f85a9fd5e1c45a3cfd5af6fe9_avoslocker_luca-stealer_qakbot_revil
- Size
  
  3.1MB
- MD5
  
  b7cff84f85a9fd5e1c45a3cfd5af6fe9
- SHA1
  
  286dc00b7a2a6a561269cbcc0e1480a1051c6959
- SHA256
  
  99e43ffbc68a44c41b43515ba40a554a0d1dcb348ce1075d28f305a6dec26b1f
- SHA512
  
  1aeffaa7b189d730430eb46bdc3bb5c651e9eddc6aa43fc48660eb89e110d20d059c821f2e68a94d15095d65aaa9d9ce636b3d6e30bed07b1949be94b54d1ba4
- SSDEEP
  
  98304:J+vJAYCRopGE8/8+YXWN5aqvmh69CEN6rV:0JA2p05tvmhIm
Score

5^/10

discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2