fb527658d4838e2573ddd13b47a677c0ea125fa60827461c560db5fb40ee63b7 | Triage

Sharing

General

Target

fb527658d4838e2573ddd13b47a677c0ea125fa60827461c560db5fb40ee63b7
Size

316KB
Sample

221003-2adq9aaad6
MD5

04b3ccfec86ad35d767ac9a4e0510da0
SHA1

e2d83bcd5668c0ecbb9902cd8542d0192170d537
SHA256

fb527658d4838e2573ddd13b47a677c0ea125fa60827461c560db5fb40ee63b7
SHA512

c3df39e123da3c587bde86e99d50aa578c0182aa78194685ad084f7890ba7d021eb79494c5dfc04e6fb74d7b54e6863d1c4383e20894e9f15f826e54c16c7bfb
SSDEEP

6144:FrybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2pho/:FrLkuveY3EMK9ObxD/06s5w3BL/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fb527658d4838e2573ddd13b47a677c0ea125fa60827461c560db5fb40ee63b7
- Size
  
  316KB
- MD5
  
  04b3ccfec86ad35d767ac9a4e0510da0
- SHA1
  
  e2d83bcd5668c0ecbb9902cd8542d0192170d537
- SHA256
  
  fb527658d4838e2573ddd13b47a677c0ea125fa60827461c560db5fb40ee63b7
- SHA512
  
  c3df39e123da3c587bde86e99d50aa578c0182aa78194685ad084f7890ba7d021eb79494c5dfc04e6fb74d7b54e6863d1c4383e20894e9f15f826e54c16c7bfb
- SSDEEP
  
  6144:FrybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2pho/:FrLkuveY3EMK9ObxD/06s5w3BL/
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2