4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b | Triage

Sharing

General

Target

4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b
Size

327KB
Sample

221029-ej877aaef9
MD5

f3e6b8b414e9801d808c9feb5cd305a8
SHA1

8162d11bae5c665b75178b5991cc7e4f26839bfa
SHA256

4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b
SHA512

af1b6fedf034a6d885bce4bbd0fd04a330c082db35cac3dfe41c4bff9592c648833d8a7b3a0c8e739a9864a24559130b8381d7d53e4bfcf5fb42ccbef93ca637
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FE:Jr4iu6/eIo4Rsw33AtsmQR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b
- Size
  
  327KB
- MD5
  
  f3e6b8b414e9801d808c9feb5cd305a8
- SHA1
  
  8162d11bae5c665b75178b5991cc7e4f26839bfa
- SHA256
  
  4558fae3542a0b471d95ba307346c2101f28e0f16f43ccb35225c4c1a7493e2b
- SHA512
  
  af1b6fedf034a6d885bce4bbd0fd04a330c082db35cac3dfe41c4bff9592c648833d8a7b3a0c8e739a9864a24559130b8381d7d53e4bfcf5fb42ccbef93ca637
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FE:Jr4iu6/eIo4Rsw33AtsmQR
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2