72654580ae0c7c5b7dd5e10abc08ad0fe92c5c258dbe4d970cbceb296a1c3858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72654580ae0c7c5b7dd5e10abc08ad0fe92c5c258dbe4d970cbceb296a1c3858
Size

313KB
Sample

221003-2d4rvaaca3
MD5

3212c87565db8b4f1b4e57ddc14ab3e0
SHA1

0f2e1b7101891887a32b077c565cee781432ae5a
SHA256

72654580ae0c7c5b7dd5e10abc08ad0fe92c5c258dbe4d970cbceb296a1c3858
SHA512

1911de412dcfd2575be716e8b47eaaadf956f3f2435fbe5b94e489458904e9949e27fef355ed5e4512ba6b8f7ff4b275f72de4c07d66791c933795951121b401
SSDEEP

6144:7rwbUzkuvcBYC47l2xXPgTOEpkDwSXV3exjt4+cUax4U4XCPCXm:7rlkuveY3o1DDwsx+t9Cx4Uwiim

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  72654580ae0c7c5b7dd5e10abc08ad0fe92c5c258dbe4d970cbceb296a1c3858
- Size
  
  313KB
- MD5
  
  3212c87565db8b4f1b4e57ddc14ab3e0
- SHA1
  
  0f2e1b7101891887a32b077c565cee781432ae5a
- SHA256
  
  72654580ae0c7c5b7dd5e10abc08ad0fe92c5c258dbe4d970cbceb296a1c3858
- SHA512
  
  1911de412dcfd2575be716e8b47eaaadf956f3f2435fbe5b94e489458904e9949e27fef355ed5e4512ba6b8f7ff4b275f72de4c07d66791c933795951121b401
- SSDEEP
  
  6144:7rwbUzkuvcBYC47l2xXPgTOEpkDwSXV3exjt4+cUax4U4XCPCXm:7rlkuveY3o1DDwsx+t9Cx4Uwiim
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2