fac1fe44693789bc0f518454592f5a7df60332543aa0658b115d1089e07c39c1 | Triage

Sharing

General

Target

fac1fe44693789bc0f518454592f5a7df60332543aa0658b115d1089e07c39c1
Size

313KB
Sample

221029-nxm2jsedf8
MD5

9921fcd4e009cf3324c130d4787f17ec
SHA1

529e2fe9f6cb346ee6cdd0ee584d8b6a28ea866d
SHA256

fac1fe44693789bc0f518454592f5a7df60332543aa0658b115d1089e07c39c1
SHA512

8083e0cae0f4e15217b572329bad5c4bf6422612329bcae251430fdfb29d10147838c7e3f1c871fbf39c629146b011b00e314e9155dfa103630151eb8bd6653b
SSDEEP

6144:grJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDq:grfu6/eIo4jVW5soVCcQovoO0DJM+EF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fac1fe44693789bc0f518454592f5a7df60332543aa0658b115d1089e07c39c1
- Size
  
  313KB
- MD5
  
  9921fcd4e009cf3324c130d4787f17ec
- SHA1
  
  529e2fe9f6cb346ee6cdd0ee584d8b6a28ea866d
- SHA256
  
  fac1fe44693789bc0f518454592f5a7df60332543aa0658b115d1089e07c39c1
- SHA512
  
  8083e0cae0f4e15217b572329bad5c4bf6422612329bcae251430fdfb29d10147838c7e3f1c871fbf39c629146b011b00e314e9155dfa103630151eb8bd6653b
- SSDEEP
  
  6144:grJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDq:grfu6/eIo4jVW5soVCcQovoO0DJM+EF
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2