d5fb35f3bd64ec9e12dbcc4187424e740ed7a7a147800acf3402d23b246b427c | Triage

Sharing

General

Target

d5fb35f3bd64ec9e12dbcc4187424e740ed7a7a147800acf3402d23b246b427c
Size

326KB
Sample

221107-dhrq3seaf3
MD5

17cc87fe138c4c295bfa3e7758d3d040
SHA1

5898960ebdd262c0229d6ce15e1be2efca543eb8
SHA256

d5fb35f3bd64ec9e12dbcc4187424e740ed7a7a147800acf3402d23b246b427c
SHA512

692bc757ce29929ef744eb65ee0a66f8f6f39f1c2234d1a2ad4f4903a2e3f6f8a92e05ebac6f4ac300775c1ccec04afa68e19908db3e73abca0e52385ed43af6
SSDEEP

6144:6r4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clge:6r4gu6/eIo4nULZKMRwxuPfk6m

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d5fb35f3bd64ec9e12dbcc4187424e740ed7a7a147800acf3402d23b246b427c
- Size
  
  326KB
- MD5
  
  17cc87fe138c4c295bfa3e7758d3d040
- SHA1
  
  5898960ebdd262c0229d6ce15e1be2efca543eb8
- SHA256
  
  d5fb35f3bd64ec9e12dbcc4187424e740ed7a7a147800acf3402d23b246b427c
- SHA512
  
  692bc757ce29929ef744eb65ee0a66f8f6f39f1c2234d1a2ad4f4903a2e3f6f8a92e05ebac6f4ac300775c1ccec04afa68e19908db3e73abca0e52385ed43af6
- SSDEEP
  
  6144:6r4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clge:6r4gu6/eIo4nULZKMRwxuPfk6m
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2