4a3237cb0dfc3cdf3f6c51e7a8357fd35d6a267c2bc8494bb3adb19d2c06f021 | Triage

Sharing

General

Target

4a3237cb0dfc3cdf3f6c51e7a8357fd35d6a267c2bc8494bb3adb19d2c06f021
Size

324KB
Sample

221029-q6v5maafar
MD5

6eca02f9e8ae138c77d96a6e7d050f84
SHA1

9260a7f516cb47854d32442cf9d5a3a4864253af
SHA256

4a3237cb0dfc3cdf3f6c51e7a8357fd35d6a267c2bc8494bb3adb19d2c06f021
SHA512

3e5c314dd6bd2063344d165fd334047d96b07a9286ccaf2d6d1d80c6e603269ce1816233e6dafb8b0028774052113d4efc9df28796f674eda1964eaf0f954450
SSDEEP

6144:eJDLTUYN+JuqAypwfc8QTVB4FJOspEihPdkxJfHY:eJDLTUW+Juq9ph8QiJOspEmdYJf4

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  4a3237cb0dfc3cdf3f6c51e7a8357fd35d6a267c2bc8494bb3adb19d2c06f021
- Size
  
  324KB
- MD5
  
  6eca02f9e8ae138c77d96a6e7d050f84
- SHA1
  
  9260a7f516cb47854d32442cf9d5a3a4864253af
- SHA256
  
  4a3237cb0dfc3cdf3f6c51e7a8357fd35d6a267c2bc8494bb3adb19d2c06f021
- SHA512
  
  3e5c314dd6bd2063344d165fd334047d96b07a9286ccaf2d6d1d80c6e603269ce1816233e6dafb8b0028774052113d4efc9df28796f674eda1964eaf0f954450
- SSDEEP
  
  6144:eJDLTUYN+JuqAypwfc8QTVB4FJOspEihPdkxJfHY:eJDLTUW+Juq9ph8QiJOspEmdYJf4
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2