cf67d5c1469e649ba40fd509f3f42e517ba4896ab9ea4d78dbfd1089ae05e3c4 | Triage

Sharing

General

Target

cf67d5c1469e649ba40fd509f3f42e517ba4896ab9ea4d78dbfd1089ae05e3c4
Size

327KB
Sample

221029-lz2llsccfn
MD5

295b3bb00f6b37d631a57d1b89d9ad74
SHA1

03f140690c7db41dcd2ec2a04c73bf338ff655bc
SHA256

cf67d5c1469e649ba40fd509f3f42e517ba4896ab9ea4d78dbfd1089ae05e3c4
SHA512

a06547d80f3478548e68f747f57cbb0e154056bfd6241e8ed6216c3308bf217721e4e20266dc57d0030673615d9162d4884f10faef5c932bd09de259ff2c26f2
SSDEEP

6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FK:hr4iu6/eIo4Rsw33AtsmQ3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cf67d5c1469e649ba40fd509f3f42e517ba4896ab9ea4d78dbfd1089ae05e3c4
- Size
  
  327KB
- MD5
  
  295b3bb00f6b37d631a57d1b89d9ad74
- SHA1
  
  03f140690c7db41dcd2ec2a04c73bf338ff655bc
- SHA256
  
  cf67d5c1469e649ba40fd509f3f42e517ba4896ab9ea4d78dbfd1089ae05e3c4
- SHA512
  
  a06547d80f3478548e68f747f57cbb0e154056bfd6241e8ed6216c3308bf217721e4e20266dc57d0030673615d9162d4884f10faef5c932bd09de259ff2c26f2
- SSDEEP
  
  6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FK:hr4iu6/eIo4Rsw33AtsmQ3
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2