dfbe934241b0509a439109d42ee3cbd76230b086b1e5c6751f51f5e060ded649 | Triage

Sharing

General

Target

dfbe934241b0509a439109d42ee3cbd76230b086b1e5c6751f51f5e060ded649
Size

316KB
Sample

221123-h3495aeh32
MD5

5fe6cc265a0493976157e671b93106db
SHA1

c35b96677276b91da01dfc79a73812cb5e23686b
SHA256

dfbe934241b0509a439109d42ee3cbd76230b086b1e5c6751f51f5e060ded649
SHA512

c77d89537151a9339259d713e39a69ad574189503771ee480226da6491f9f0fdb7791c488b215bac8688f71341262866741f60b5ef196918e50d2f19c6463804
SSDEEP

6144:7r/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhY9:7r0kuveY3cY1cia66MGd0Vs9BdN6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dfbe934241b0509a439109d42ee3cbd76230b086b1e5c6751f51f5e060ded649
- Size
  
  316KB
- MD5
  
  5fe6cc265a0493976157e671b93106db
- SHA1
  
  c35b96677276b91da01dfc79a73812cb5e23686b
- SHA256
  
  dfbe934241b0509a439109d42ee3cbd76230b086b1e5c6751f51f5e060ded649
- SHA512
  
  c77d89537151a9339259d713e39a69ad574189503771ee480226da6491f9f0fdb7791c488b215bac8688f71341262866741f60b5ef196918e50d2f19c6463804
- SSDEEP
  
  6144:7r/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhY9:7r0kuveY3cY1cia66MGd0Vs9BdN6
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2