c958ca343f575993fc82015963792653289a601342b6bfa876d064f077183c94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c958ca343f575993fc82015963792653289a601342b6bfa876d064f077183c94
Size

313KB
Sample

221021-drz4tahhe4
MD5

4dda012cc06224b3aa1d6a63e5c810e0
SHA1

7fb69a3c4e4ab245ac1d0b70529b540f044c6e90
SHA256

c958ca343f575993fc82015963792653289a601342b6bfa876d064f077183c94
SHA512

347f3a53b507264b685a362e036aca27bfce76c86de4b0ba3da3adb85d6a609a2abec5803af264fcda93b98fbe19a752bf9ba015d062f3f6a5f8c1c1759f0996
SSDEEP

6144:urY9uEo2S1YnQmCX492DkwNP3qpYFG+NFJCWE0ALKkizq+o8Ixc+pwymEVwk9pYh:urwu6/eIo4KfJs0ALK5q+GxcXBER9pE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c958ca343f575993fc82015963792653289a601342b6bfa876d064f077183c94
- Size
  
  313KB
- MD5
  
  4dda012cc06224b3aa1d6a63e5c810e0
- SHA1
  
  7fb69a3c4e4ab245ac1d0b70529b540f044c6e90
- SHA256
  
  c958ca343f575993fc82015963792653289a601342b6bfa876d064f077183c94
- SHA512
  
  347f3a53b507264b685a362e036aca27bfce76c86de4b0ba3da3adb85d6a609a2abec5803af264fcda93b98fbe19a752bf9ba015d062f3f6a5f8c1c1759f0996
- SSDEEP
  
  6144:urY9uEo2S1YnQmCX492DkwNP3qpYFG+NFJCWE0ALKkizq+o8Ixc+pwymEVwk9pYh:urwu6/eIo4KfJs0ALK5q+GxcXBER9pE
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2