39f6351e6dd779ab0c70e7d6089819398dcdcadd99263b71ba7094e296bc6a03 | Triage

Sharing

General

Target

39f6351e6dd779ab0c70e7d6089819398dcdcadd99263b71ba7094e296bc6a03
Size

2.7MB
Sample

221123-3gv5jsff4v
MD5

767016da6755f565ac3c0dc40aeb84ae
SHA1

fbeeb27314d5634e172ef6957bceabe94fecadb4
SHA256

39f6351e6dd779ab0c70e7d6089819398dcdcadd99263b71ba7094e296bc6a03
SHA512

b103814764d6d0c9f70b497c131c5df3b5c5d4efed0bf4db4717a498b14f56f6562800b83e67c1774b4f7f850e005107fe69cbdda0d951ba411d3f4456fed49c
SSDEEP

49152:J9RxdV8aZqlnGe8TOYUxCcd9OHsO5czEpOQB8hRFMgwGaoftX7uH9TL4Lbusq1:XRxdV82Qu/UxC2JtIgQB8aNGzX7udTLD

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  39f6351e6dd779ab0c70e7d6089819398dcdcadd99263b71ba7094e296bc6a03
- Size
  
  2.7MB
- MD5
  
  767016da6755f565ac3c0dc40aeb84ae
- SHA1
  
  fbeeb27314d5634e172ef6957bceabe94fecadb4
- SHA256
  
  39f6351e6dd779ab0c70e7d6089819398dcdcadd99263b71ba7094e296bc6a03
- SHA512
  
  b103814764d6d0c9f70b497c131c5df3b5c5d4efed0bf4db4717a498b14f56f6562800b83e67c1774b4f7f850e005107fe69cbdda0d951ba411d3f4456fed49c
- SSDEEP
  
  49152:J9RxdV8aZqlnGe8TOYUxCcd9OHsO5czEpOQB8hRFMgwGaoftX7uH9TL4Lbusq1:XRxdV82Qu/UxC2JtIgQB8aNGzX7udTLD
Score

9^/10

evasion
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2