de6fe7de4aa007d2e0d0e3ea85523e1a3452e52ffe6b1d2fd90de61a67f4815a | Triage

Sharing

General

Target

de6fe7de4aa007d2e0d0e3ea85523e1a3452e52ffe6b1d2fd90de61a67f4815a
Size

314KB
Sample

221123-h4renaeh53
MD5

66a5077cbc7ca3fd22498d404326c106
SHA1

f859ce4da7eedc017fc378507075380c55c99d77
SHA256

de6fe7de4aa007d2e0d0e3ea85523e1a3452e52ffe6b1d2fd90de61a67f4815a
SHA512

3502139d881266126009a0b7eb0d5ff5dc6a3db3e3aa9a8f4428cfc007d53cef3814a2ec217b1b94d731c068f56a73d2001946c778fa4d2d5e0ce2c3ffc8c606
SSDEEP

6144:grAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwO:gr1kuveY35YO67Wxz7wO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  de6fe7de4aa007d2e0d0e3ea85523e1a3452e52ffe6b1d2fd90de61a67f4815a
- Size
  
  314KB
- MD5
  
  66a5077cbc7ca3fd22498d404326c106
- SHA1
  
  f859ce4da7eedc017fc378507075380c55c99d77
- SHA256
  
  de6fe7de4aa007d2e0d0e3ea85523e1a3452e52ffe6b1d2fd90de61a67f4815a
- SHA512
  
  3502139d881266126009a0b7eb0d5ff5dc6a3db3e3aa9a8f4428cfc007d53cef3814a2ec217b1b94d731c068f56a73d2001946c778fa4d2d5e0ce2c3ffc8c606
- SSDEEP
  
  6144:grAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwO:gr1kuveY35YO67Wxz7wO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2