f83f81d50f3f37b053e7dea8a988f6e0f7b44f2ee8696ee727b4d5bd4f64d134 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f83f81d50f3f37b053e7dea8a988f6e0f7b44f2ee8696ee727b4d5bd4f64d134
Size

316KB
Sample

221029-x3g7xscdaq
MD5

842e38ccb449b067d54c5eb5d391a8b0
SHA1

b179f34ddfcbf946b9d49a3e33903c1be0327408
SHA256

f83f81d50f3f37b053e7dea8a988f6e0f7b44f2ee8696ee727b4d5bd4f64d134
SHA512

d8fee7c617f1d425ffd7df8a73896ce5cdaad1b1d75b980209c856608d5fbf77cf777a9ccf947a09508ea36daa91fa4a94e2122d4d380d909f1c07fcc1f960f5
SSDEEP

6144:trJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bS5:tr6kuveY3TT2XdGp9xRC4bS5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f83f81d50f3f37b053e7dea8a988f6e0f7b44f2ee8696ee727b4d5bd4f64d134
- Size
  
  316KB
- MD5
  
  842e38ccb449b067d54c5eb5d391a8b0
- SHA1
  
  b179f34ddfcbf946b9d49a3e33903c1be0327408
- SHA256
  
  f83f81d50f3f37b053e7dea8a988f6e0f7b44f2ee8696ee727b4d5bd4f64d134
- SHA512
  
  d8fee7c617f1d425ffd7df8a73896ce5cdaad1b1d75b980209c856608d5fbf77cf777a9ccf947a09508ea36daa91fa4a94e2122d4d380d909f1c07fcc1f960f5
- SSDEEP
  
  6144:trJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bS5:tr6kuveY3TT2XdGp9xRC4bS5
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2