d4b5637f0ef8c6f0f318029381a0120be2d6f0af97e6a52dd5f6e075ad85423b | Triage

Sharing

General

Target

d4b5637f0ef8c6f0f318029381a0120be2d6f0af97e6a52dd5f6e075ad85423b
Size

327KB
Sample

221107-dhwd9sgden
MD5

0a7dd48b8439f387c5d466fea35e0dd0
SHA1

fcdc404f29762eab41d89cf8e855e7c38912d3be
SHA256

d4b5637f0ef8c6f0f318029381a0120be2d6f0af97e6a52dd5f6e075ad85423b
SHA512

8840c56a8498cdb2265fe517ebbfd568021864dbb717a8801c6297318f73c2825aca820af4bb3676894c1aa47d84ed775894a34c2fb39bd57120b4277b093d3d
SSDEEP

6144:FrcbUzkuvcBYC47l2xh6UXujU/6HXgnAv0FSArgxb1BQ52:FrhkuveY3QwU/hXQDbvK2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d4b5637f0ef8c6f0f318029381a0120be2d6f0af97e6a52dd5f6e075ad85423b
- Size
  
  327KB
- MD5
  
  0a7dd48b8439f387c5d466fea35e0dd0
- SHA1
  
  fcdc404f29762eab41d89cf8e855e7c38912d3be
- SHA256
  
  d4b5637f0ef8c6f0f318029381a0120be2d6f0af97e6a52dd5f6e075ad85423b
- SHA512
  
  8840c56a8498cdb2265fe517ebbfd568021864dbb717a8801c6297318f73c2825aca820af4bb3676894c1aa47d84ed775894a34c2fb39bd57120b4277b093d3d
- SSDEEP
  
  6144:FrcbUzkuvcBYC47l2xh6UXujU/6HXgnAv0FSArgxb1BQ52:FrhkuveY3QwU/hXQDbvK2
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2