fb43b087e63cc6e6801786ec329830c516e8d26f64fdb437702f0ac80e98ea0c | Triage

Sharing

General

Target

fb43b087e63cc6e6801786ec329830c516e8d26f64fdb437702f0ac80e98ea0c
Size

327KB
Sample

221107-ddw51adha4
MD5

0e4c16f9152f9e32b9940834802690cd
SHA1

0281b9608c8b01d73a35f6fd63f7cd8d6410a892
SHA256

fb43b087e63cc6e6801786ec329830c516e8d26f64fdb437702f0ac80e98ea0c
SHA512

db65afc369544c3f801b6bc83bb9e357d70c2916dbc2a6e1add6cd5ae873e97c29077f5744734812ee68c114b2d0a2aa8b84da230c9e51e5a59c6b1cc6aaa4c7
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FTA:Jr4iu6/eIo4Rsw33AtsmQd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fb43b087e63cc6e6801786ec329830c516e8d26f64fdb437702f0ac80e98ea0c
- Size
  
  327KB
- MD5
  
  0e4c16f9152f9e32b9940834802690cd
- SHA1
  
  0281b9608c8b01d73a35f6fd63f7cd8d6410a892
- SHA256
  
  fb43b087e63cc6e6801786ec329830c516e8d26f64fdb437702f0ac80e98ea0c
- SHA512
  
  db65afc369544c3f801b6bc83bb9e357d70c2916dbc2a6e1add6cd5ae873e97c29077f5744734812ee68c114b2d0a2aa8b84da230c9e51e5a59c6b1cc6aaa4c7
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FTA:Jr4iu6/eIo4Rsw33AtsmQd
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2