34ab206149a99a52de54d33937935fe848c2655c763222d74ac3c105790843ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ab206149a99a52de54d33937935fe848c2655c763222d74ac3c105790843ec
Size

313KB
Sample

221029-f5bdqacfg9
MD5

a1fccf7888606710c0e006d7827753b1
SHA1

c3d3ee085a9fc5a7e7fa8b6b69093dcfab50126a
SHA256

34ab206149a99a52de54d33937935fe848c2655c763222d74ac3c105790843ec
SHA512

6fab40f53b8c6186d8fe2a16ca57a0902ac0db546d32b53c001217f43c3e291fef25f3fa85b3827778393f2d3b9e78844e24adbe5f3439f664fdeb5c484707b2
SSDEEP

6144:PrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lk:Pryu6/eIo4vMResyEf0uP9d9UG0k

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  34ab206149a99a52de54d33937935fe848c2655c763222d74ac3c105790843ec
- Size
  
  313KB
- MD5
  
  a1fccf7888606710c0e006d7827753b1
- SHA1
  
  c3d3ee085a9fc5a7e7fa8b6b69093dcfab50126a
- SHA256
  
  34ab206149a99a52de54d33937935fe848c2655c763222d74ac3c105790843ec
- SHA512
  
  6fab40f53b8c6186d8fe2a16ca57a0902ac0db546d32b53c001217f43c3e291fef25f3fa85b3827778393f2d3b9e78844e24adbe5f3439f664fdeb5c484707b2
- SSDEEP
  
  6144:PrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lk:Pryu6/eIo4vMResyEf0uP9d9UG0k
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2