465bdb0d9e4c1d3daf4a5b46d38dd12d40e18de3261f7ccf5b9f6e2215c68cce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

465bdb0d9e4c1d3daf4a5b46d38dd12d40e18de3261f7ccf5b9f6e2215c68cce
Size

327KB
Sample

221021-d4drcaaccr
MD5

44f43e9a35ba0cbc1cd8f9d960e254c0
SHA1

0695da56affd0e8f6a3c6b1e83a38fac1d60c42d
SHA256

465bdb0d9e4c1d3daf4a5b46d38dd12d40e18de3261f7ccf5b9f6e2215c68cce
SHA512

d60f0aa0be042b1ad4156c2243846847d9394574ec606729e6c8d0b46b81902496e8fb48aa8c9ad3080c5c21ce538e49ab698e52e9d10bc4b1319d41d936967e
SSDEEP

6144:VrsbUzkuvcBYC47l2xi2VAXBfiuAl29BYCBdHY1B8GrE8sj4nlVqMezUNoxD:VrxkuveY3eVstiB6Bd4RrE0vqMeQNaD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  465bdb0d9e4c1d3daf4a5b46d38dd12d40e18de3261f7ccf5b9f6e2215c68cce
- Size
  
  327KB
- MD5
  
  44f43e9a35ba0cbc1cd8f9d960e254c0
- SHA1
  
  0695da56affd0e8f6a3c6b1e83a38fac1d60c42d
- SHA256
  
  465bdb0d9e4c1d3daf4a5b46d38dd12d40e18de3261f7ccf5b9f6e2215c68cce
- SHA512
  
  d60f0aa0be042b1ad4156c2243846847d9394574ec606729e6c8d0b46b81902496e8fb48aa8c9ad3080c5c21ce538e49ab698e52e9d10bc4b1319d41d936967e
- SSDEEP
  
  6144:VrsbUzkuvcBYC47l2xi2VAXBfiuAl29BYCBdHY1B8GrE8sj4nlVqMezUNoxD:VrxkuveY3eVstiB6Bd4RrE0vqMeQNaD
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2