6584ca80d74188b14ab6dffc530ed983cda4ffd06db6215fb51b30b9c3cd8776 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6584ca80d74188b14ab6dffc530ed983cda4ffd06db6215fb51b30b9c3cd8776
Size

323KB
Sample

221029-qk46eahffp
MD5

57253678a9c294e40122b8cab5a51708
SHA1

956e07efa92b9ef4514eeddd51be3759b073db64
SHA256

6584ca80d74188b14ab6dffc530ed983cda4ffd06db6215fb51b30b9c3cd8776
SHA512

f4922e7151e0537d7329e5506c09e542e65bc343a044ef5c974250b8e6c0eff9889b84dcff932ba7752a7965a89efd6326eb06a5e598f15c38b61d4f2aa69b1c
SSDEEP

6144:Fmc567wc7vptFe+pjrT30WIvuFkB8uoI40Jm3Mkpi:167B7vpPprT32uWBwI5eMkpi

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  6584ca80d74188b14ab6dffc530ed983cda4ffd06db6215fb51b30b9c3cd8776
- Size
  
  323KB
- MD5
  
  57253678a9c294e40122b8cab5a51708
- SHA1
  
  956e07efa92b9ef4514eeddd51be3759b073db64
- SHA256
  
  6584ca80d74188b14ab6dffc530ed983cda4ffd06db6215fb51b30b9c3cd8776
- SHA512
  
  f4922e7151e0537d7329e5506c09e542e65bc343a044ef5c974250b8e6c0eff9889b84dcff932ba7752a7965a89efd6326eb06a5e598f15c38b61d4f2aa69b1c
- SSDEEP
  
  6144:Fmc567wc7vptFe+pjrT30WIvuFkB8uoI40Jm3Mkpi:167B7vpPprT32uWBwI5eMkpi
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2