f1991265f750a0f50ad39993edadefee17f9096041c93e9209a1bb6d3de6fa5e | Triage

Sharing

General

Target

f1991265f750a0f50ad39993edadefee17f9096041c93e9209a1bb6d3de6fa5e
Size

316KB
Sample

221121-thf8caca4y
MD5

32a715c0d2c261ea116889bf640e3c70
SHA1

f4ccd1300efb445fffa2c0a8514fda1a9f5fda73
SHA256

f1991265f750a0f50ad39993edadefee17f9096041c93e9209a1bb6d3de6fa5e
SHA512

d96765c6c4a2d9345922b1170798d240dfdd36a22f367cf7e9a195393ab7f27b7c43914a1f826477a6d208e13748c295d4185270d3dbd1cd7c248473d850bbbe
SSDEEP

6144:lrybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phoe:lrLkuveY3EMK9ObxD/06s5w3BLe

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f1991265f750a0f50ad39993edadefee17f9096041c93e9209a1bb6d3de6fa5e
- Size
  
  316KB
- MD5
  
  32a715c0d2c261ea116889bf640e3c70
- SHA1
  
  f4ccd1300efb445fffa2c0a8514fda1a9f5fda73
- SHA256
  
  f1991265f750a0f50ad39993edadefee17f9096041c93e9209a1bb6d3de6fa5e
- SHA512
  
  d96765c6c4a2d9345922b1170798d240dfdd36a22f367cf7e9a195393ab7f27b7c43914a1f826477a6d208e13748c295d4185270d3dbd1cd7c248473d850bbbe
- SSDEEP
  
  6144:lrybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phoe:lrLkuveY3EMK9ObxD/06s5w3BLe
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2