fdb9e6c3b057d943dd8f56962aa662dd5889bc4faef822c7cef05dfc2baf633b | Triage

Sharing

General

Target

fdb9e6c3b057d943dd8f56962aa662dd5889bc4faef822c7cef05dfc2baf633b
Size

49KB
Sample

221020-fxfngafdg9
MD5

8024695047d57d6285775ae815ef6330
SHA1

628b26ef3a487393f86665caf2d69d49ef977462
SHA256

fdb9e6c3b057d943dd8f56962aa662dd5889bc4faef822c7cef05dfc2baf633b
SHA512

65572c0c6a2b8b9c80e454061ecb560228fdb4ae72f5eff267906ac582244cc1f29d4e366b4e0f2df1afd9b33e2233111a3788527098df37520643f4d41468ae
SSDEEP

768:cFAknMX/TWXMqTvviaqWi2PLP+Oyac/7k:cyAMXCXMqTvv/TPPA

Score

7^/10

Malware Config

Targets

- Target
  
  fdb9e6c3b057d943dd8f56962aa662dd5889bc4faef822c7cef05dfc2baf633b
- Size
  
  49KB
- MD5
  
  8024695047d57d6285775ae815ef6330
- SHA1
  
  628b26ef3a487393f86665caf2d69d49ef977462
- SHA256
  
  fdb9e6c3b057d943dd8f56962aa662dd5889bc4faef822c7cef05dfc2baf633b
- SHA512
  
  65572c0c6a2b8b9c80e454061ecb560228fdb4ae72f5eff267906ac582244cc1f29d4e366b4e0f2df1afd9b33e2233111a3788527098df37520643f4d41468ae
- SSDEEP
  
  768:cFAknMX/TWXMqTvviaqWi2PLP+Oyac/7k:cyAMXCXMqTvv/TPPA
Score

7^/10
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2