de3c437450c7c484339f2135e90a94d7f61391082e9aa90bd5b9a22164495e8b | Triage

Sharing

General

Target

de3c437450c7c484339f2135e90a94d7f61391082e9aa90bd5b9a22164495e8b
Size

327KB
Sample

221123-h4vr3sac9y
MD5

e04fa6df1e90f0c8e2261f69690f65da
SHA1

1d5712a1128475a3c6dfeb38f15936604cc0f6a8
SHA256

de3c437450c7c484339f2135e90a94d7f61391082e9aa90bd5b9a22164495e8b
SHA512

49f69e3ca62813e1c4af9523ce8cfc218670238dd0089a4a48283f99b764a17a1db805c9205b7c0616a8f78fb94938d4b52582156f9c07018ace4cc588730bc4
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fa:Rr4iu6/eIo4Rsw33AtsmQn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  de3c437450c7c484339f2135e90a94d7f61391082e9aa90bd5b9a22164495e8b
- Size
  
  327KB
- MD5
  
  e04fa6df1e90f0c8e2261f69690f65da
- SHA1
  
  1d5712a1128475a3c6dfeb38f15936604cc0f6a8
- SHA256
  
  de3c437450c7c484339f2135e90a94d7f61391082e9aa90bd5b9a22164495e8b
- SHA512
  
  49f69e3ca62813e1c4af9523ce8cfc218670238dd0089a4a48283f99b764a17a1db805c9205b7c0616a8f78fb94938d4b52582156f9c07018ace4cc588730bc4
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fa:Rr4iu6/eIo4Rsw33AtsmQn
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2