43eafc561cb7dc4d6381a498fc3151169a37ac6add854c252d93b680ae4a4cae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43eafc561cb7dc4d6381a498fc3151169a37ac6add854c252d93b680ae4a4cae
Size

257KB
Sample

221029-gwns5adff4
MD5

802deb6515218a7af07fc68bb8450d85
SHA1

4d5cb8ebb0251ca9a7d6d05bb60214653d9a9271
SHA256

43eafc561cb7dc4d6381a498fc3151169a37ac6add854c252d93b680ae4a4cae
SHA512

8d0c5cbb779c08ddda9aaf6fc644a109e3275d2c894b2433f3e8b57fb0b826914d0e6724fe7e679546bb31e1d5c4172367f9bbaf403529533a439dac0539786b
SSDEEP

3072:D4beK2IXJCvV0HSyzEuMrPjo9XFf40dbkWWQDvBsDH+jP9nKbhAydwAWvL5utdGb:D4qXIXQerMrPc9Oknj+qjFuZwptutdGb

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  43eafc561cb7dc4d6381a498fc3151169a37ac6add854c252d93b680ae4a4cae
- Size
  
  257KB
- MD5
  
  802deb6515218a7af07fc68bb8450d85
- SHA1
  
  4d5cb8ebb0251ca9a7d6d05bb60214653d9a9271
- SHA256
  
  43eafc561cb7dc4d6381a498fc3151169a37ac6add854c252d93b680ae4a4cae
- SHA512
  
  8d0c5cbb779c08ddda9aaf6fc644a109e3275d2c894b2433f3e8b57fb0b826914d0e6724fe7e679546bb31e1d5c4172367f9bbaf403529533a439dac0539786b
- SSDEEP
  
  3072:D4beK2IXJCvV0HSyzEuMrPjo9XFf40dbkWWQDvBsDH+jP9nKbhAydwAWvL5utdGb:D4qXIXQerMrPc9Oknj+qjFuZwptutdGb
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2