df98d0e43fb3c6a7e2c047723fa3f4da346ddb981417a7ccdc96a4080eb97895 | Triage

Sharing

General

Target

df98d0e43fb3c6a7e2c047723fa3f4da346ddb981417a7ccdc96a4080eb97895
Size

316KB
Sample

221123-h38mjseh35
MD5

c20fd429f5aa70f577b697ecd3ad8ddd
SHA1

c95fe1ad75ecb5cc45fb14427dca793b9d7206a8
SHA256

df98d0e43fb3c6a7e2c047723fa3f4da346ddb981417a7ccdc96a4080eb97895
SHA512

6bc055253fc94ab793905b2d80b774e89e25807673a8d3343ab053bbb6545c18d3f3343de316843e7530fdbf6392bce753c1696a77e173a381a975af2bf4462e
SSDEEP

6144:5rvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVG:5rkkuveY3zhlV6tmDxzwVG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  df98d0e43fb3c6a7e2c047723fa3f4da346ddb981417a7ccdc96a4080eb97895
- Size
  
  316KB
- MD5
  
  c20fd429f5aa70f577b697ecd3ad8ddd
- SHA1
  
  c95fe1ad75ecb5cc45fb14427dca793b9d7206a8
- SHA256
  
  df98d0e43fb3c6a7e2c047723fa3f4da346ddb981417a7ccdc96a4080eb97895
- SHA512
  
  6bc055253fc94ab793905b2d80b774e89e25807673a8d3343ab053bbb6545c18d3f3343de316843e7530fdbf6392bce753c1696a77e173a381a975af2bf4462e
- SSDEEP
  
  6144:5rvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVG:5rkkuveY3zhlV6tmDxzwVG
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2