fa1094b28324e4f95f957e68a7a969adcddc9ca71d93ddf725028fb7f1f1955c | Triage

Sharing

General

Target

fa1094b28324e4f95f957e68a7a969adcddc9ca71d93ddf725028fb7f1f1955c
Size

316KB
Sample

221019-rv76gsbgf7
MD5

a0e674357b504f305ca834f1c8379430
SHA1

7bc6d07a2a8ff9ab3467e1da353091f69f4afe77
SHA256

fa1094b28324e4f95f957e68a7a969adcddc9ca71d93ddf725028fb7f1f1955c
SHA512

53e08e961085b3df1f91c8b8d2a6ad5cd605c0e245c4aa6f11b7f191f1b40de302e72b82dee688c9441a5417221488ce34043f6b2cd3f21b335a3058eba66d8c
SSDEEP

6144:yrabUzkuvcBYC47l2xgh2hyP9wUnIG2mQP6vxoG0rkKt:yrDkuveY3N2eHnIPmQP6vqvV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fa1094b28324e4f95f957e68a7a969adcddc9ca71d93ddf725028fb7f1f1955c
- Size
  
  316KB
- MD5
  
  a0e674357b504f305ca834f1c8379430
- SHA1
  
  7bc6d07a2a8ff9ab3467e1da353091f69f4afe77
- SHA256
  
  fa1094b28324e4f95f957e68a7a969adcddc9ca71d93ddf725028fb7f1f1955c
- SHA512
  
  53e08e961085b3df1f91c8b8d2a6ad5cd605c0e245c4aa6f11b7f191f1b40de302e72b82dee688c9441a5417221488ce34043f6b2cd3f21b335a3058eba66d8c
- SSDEEP
  
  6144:yrabUzkuvcBYC47l2xgh2hyP9wUnIG2mQP6vxoG0rkKt:yrDkuveY3N2eHnIPmQP6vqvV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2