df6a78ce239606c59bba0c5b93f0ef6e35ab39cc43d89f17435e0f481f1d041d | Triage

Sharing

General

Target

df6a78ce239606c59bba0c5b93f0ef6e35ab39cc43d89f17435e0f481f1d041d
Size

313KB
Sample

221123-h4bzzaeh38
MD5

510d6fa2e9722148888f75f5901ad310
SHA1

02fae7f0d36c2aee381a4534f55a0144cd89afb6
SHA256

df6a78ce239606c59bba0c5b93f0ef6e35ab39cc43d89f17435e0f481f1d041d
SHA512

c83926f1554f971909ca6e356d1c3af93e0f1cda0433a0d02f95d7f4e568aa62c81aa6c4e09e40cddc761dafbba17a875a40fd414e5678aba7817138d9153820
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LB:3ryu6/eIo4vMResyEf0uP9d9UG0B

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  df6a78ce239606c59bba0c5b93f0ef6e35ab39cc43d89f17435e0f481f1d041d
- Size
  
  313KB
- MD5
  
  510d6fa2e9722148888f75f5901ad310
- SHA1
  
  02fae7f0d36c2aee381a4534f55a0144cd89afb6
- SHA256
  
  df6a78ce239606c59bba0c5b93f0ef6e35ab39cc43d89f17435e0f481f1d041d
- SHA512
  
  c83926f1554f971909ca6e356d1c3af93e0f1cda0433a0d02f95d7f4e568aa62c81aa6c4e09e40cddc761dafbba17a875a40fd414e5678aba7817138d9153820
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LB:3ryu6/eIo4vMResyEf0uP9d9UG0B
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2