f83f914f2051d02ba57f2d0eb830c985538a3fd4e1d119ffee3c2acb74bfbe4f | Triage

Sharing

General

Target

f83f914f2051d02ba57f2d0eb830c985538a3fd4e1d119ffee3c2acb74bfbe4f
Size

316KB
Sample

221019-rwa75sccfl
MD5

918a4e9b6eeb4c9684b0fec7983ca260
SHA1

867b2cc96af85107e686a53fa24238d5d78b21fb
SHA256

f83f914f2051d02ba57f2d0eb830c985538a3fd4e1d119ffee3c2acb74bfbe4f
SHA512

0145e99e387530266c3b2733deebff54226a42ce67a445664bd5abb7847558a858bd5edcb86103feb01737263ab4d1895f3e73e4fa545f45e3d2e5a4d4f87b57
SSDEEP

6144:hrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVT:hrkkuveY3zhlV6tmDxzwVT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f83f914f2051d02ba57f2d0eb830c985538a3fd4e1d119ffee3c2acb74bfbe4f
- Size
  
  316KB
- MD5
  
  918a4e9b6eeb4c9684b0fec7983ca260
- SHA1
  
  867b2cc96af85107e686a53fa24238d5d78b21fb
- SHA256
  
  f83f914f2051d02ba57f2d0eb830c985538a3fd4e1d119ffee3c2acb74bfbe4f
- SHA512
  
  0145e99e387530266c3b2733deebff54226a42ce67a445664bd5abb7847558a858bd5edcb86103feb01737263ab4d1895f3e73e4fa545f45e3d2e5a4d4f87b57
- SSDEEP
  
  6144:hrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVT:hrkkuveY3zhlV6tmDxzwVT
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2