de20f7b5b01da26a4b4ff1ac7ea9f3e17f4c2ff5e7d403aabeb7920d71cbd247 | Triage

Sharing

General

Target

de20f7b5b01da26a4b4ff1ac7ea9f3e17f4c2ff5e7d403aabeb7920d71cbd247
Size

315KB
Sample

221123-h4xxfaad2s
MD5

4b3553999c5387d04278024f592ab6d9
SHA1

bb4881d45be742141bb80e1552391cd6b768cdc6
SHA256

de20f7b5b01da26a4b4ff1ac7ea9f3e17f4c2ff5e7d403aabeb7920d71cbd247
SHA512

c34bc5b09d792bf33bfca29560a71269d66d76e928a3fa102631d62bc9650efba8b3963eb533e16e60c3116dc49455e0211595e4727148786b22077909448b4d
SSDEEP

6144:OrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5b:OrdkuveY36kjZP/XKxlSZAHO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  de20f7b5b01da26a4b4ff1ac7ea9f3e17f4c2ff5e7d403aabeb7920d71cbd247
- Size
  
  315KB
- MD5
  
  4b3553999c5387d04278024f592ab6d9
- SHA1
  
  bb4881d45be742141bb80e1552391cd6b768cdc6
- SHA256
  
  de20f7b5b01da26a4b4ff1ac7ea9f3e17f4c2ff5e7d403aabeb7920d71cbd247
- SHA512
  
  c34bc5b09d792bf33bfca29560a71269d66d76e928a3fa102631d62bc9650efba8b3963eb533e16e60c3116dc49455e0211595e4727148786b22077909448b4d
- SSDEEP
  
  6144:OrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5b:OrdkuveY36kjZP/XKxlSZAHO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2