f96c8133294ed05755c1ccccc664156524d2668e7f485b30c7e8705b33c25713 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f96c8133294ed05755c1ccccc664156524d2668e7f485b30c7e8705b33c25713
Size

334KB
Sample

221029-hpy6ysegh7
MD5

6582bb358f2858cd55fd6967a43cfd3d
SHA1

903ac62579e65cd430db27ab0095dce9a5148a3e
SHA256

f96c8133294ed05755c1ccccc664156524d2668e7f485b30c7e8705b33c25713
SHA512

a85029d17b0318242f987a082eb123e9b654c6c4f6c4a3b7274819a047d1e211bb511cb84bc85a23db83200f23c7488431e427e36a79a506aa534c1f1a072059
SSDEEP

6144:5rv3cAbUzkuvcBYC47l2xDT2ktvFSNCOwe7KcN90pEWe6dGcsX74mzP6:5rv3c1kuveY3OT2ktvFSZw20pLnsjb6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f96c8133294ed05755c1ccccc664156524d2668e7f485b30c7e8705b33c25713
- Size
  
  334KB
- MD5
  
  6582bb358f2858cd55fd6967a43cfd3d
- SHA1
  
  903ac62579e65cd430db27ab0095dce9a5148a3e
- SHA256
  
  f96c8133294ed05755c1ccccc664156524d2668e7f485b30c7e8705b33c25713
- SHA512
  
  a85029d17b0318242f987a082eb123e9b654c6c4f6c4a3b7274819a047d1e211bb511cb84bc85a23db83200f23c7488431e427e36a79a506aa534c1f1a072059
- SSDEEP
  
  6144:5rv3cAbUzkuvcBYC47l2xDT2ktvFSNCOwe7KcN90pEWe6dGcsX74mzP6:5rv3c1kuveY3OT2ktvFSZw20pLnsjb6
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2