f204e641f2e6d5a2a1703e2180a3e02df8804072d8ddadee42b1ef1c6ee6a11b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f204e641f2e6d5a2a1703e2180a3e02df8804072d8ddadee42b1ef1c6ee6a11b
Size

316KB
Sample

221011-dm2rvacah7
MD5

65a9fae84db87deef91c278e69ab2090
SHA1

feb6212ac58bfaff6da1c966c2ce10928037d088
SHA256

f204e641f2e6d5a2a1703e2180a3e02df8804072d8ddadee42b1ef1c6ee6a11b
SHA512

b179d7a82e5836b7df96bb392b2f9a16a05f794cbc4c50d4112e286c7dd730f5f7d2bb35216e5958d15a92870ac4838efca15333d01326f8ca35e40f31c39c28
SSDEEP

6144:nrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyM3:nr2kuveY3ZF31N4XxZj3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f204e641f2e6d5a2a1703e2180a3e02df8804072d8ddadee42b1ef1c6ee6a11b
- Size
  
  316KB
- MD5
  
  65a9fae84db87deef91c278e69ab2090
- SHA1
  
  feb6212ac58bfaff6da1c966c2ce10928037d088
- SHA256
  
  f204e641f2e6d5a2a1703e2180a3e02df8804072d8ddadee42b1ef1c6ee6a11b
- SHA512
  
  b179d7a82e5836b7df96bb392b2f9a16a05f794cbc4c50d4112e286c7dd730f5f7d2bb35216e5958d15a92870ac4838efca15333d01326f8ca35e40f31c39c28
- SSDEEP
  
  6144:nrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyM3:nr2kuveY3ZF31N4XxZj3
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2