00a17049938f5e4f425cb5fe5ef441db2847e49a4f269cf5c1d3b5ffc985a775 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00a17049938f5e4f425cb5fe5ef441db2847e49a4f269cf5c1d3b5ffc985a775
Size

313KB
Sample

221029-fgca4sbgc2
MD5

f627859a0e2ee7227c15c9947d6053f2
SHA1

40739ca0e866f428256a4eac9c643782a7c98cf8
SHA256

00a17049938f5e4f425cb5fe5ef441db2847e49a4f269cf5c1d3b5ffc985a775
SHA512

fed131ee32460a3f0384865e67204cef6bc2281b7e61137472540a570bc948ab104ecf5253662dea3adc955501700fccc5bef72b5c699d059e4f93fa7e23a425
SSDEEP

6144:prJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVD0:prfu6/eIo4jVW5soVCcQovoO0DJM+Ev

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  00a17049938f5e4f425cb5fe5ef441db2847e49a4f269cf5c1d3b5ffc985a775
- Size
  
  313KB
- MD5
  
  f627859a0e2ee7227c15c9947d6053f2
- SHA1
  
  40739ca0e866f428256a4eac9c643782a7c98cf8
- SHA256
  
  00a17049938f5e4f425cb5fe5ef441db2847e49a4f269cf5c1d3b5ffc985a775
- SHA512
  
  fed131ee32460a3f0384865e67204cef6bc2281b7e61137472540a570bc948ab104ecf5253662dea3adc955501700fccc5bef72b5c699d059e4f93fa7e23a425
- SSDEEP
  
  6144:prJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVD0:prfu6/eIo4jVW5soVCcQovoO0DJM+Ev
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2