d6639b188677afe644975279d88a3632a4bf89a17119020222c35301ec96e4ac | Triage

Sharing

General

Target

d6639b188677afe644975279d88a3632a4bf89a17119020222c35301ec96e4ac
Size

313KB
Sample

221123-h75rfsfa76
MD5

66cfcb94bc14c71831b22615980e240f
SHA1

45068904eb2d75088697fff1d2df36f04601e89f
SHA256

d6639b188677afe644975279d88a3632a4bf89a17119020222c35301ec96e4ac
SHA512

ff5ada9e0fb39ce6875ddaf43504cd9aab9c6316b4e751d6201d3f5ac9e321da5153b58b0d1c3a80a6d0589fc605342f7ba5f302c9f3c3232c0867c0dd965559
SSDEEP

6144:lrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzI:lrfu6/eIo4XwlWKM231t5UnRr3DdRp5d

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d6639b188677afe644975279d88a3632a4bf89a17119020222c35301ec96e4ac
- Size
  
  313KB
- MD5
  
  66cfcb94bc14c71831b22615980e240f
- SHA1
  
  45068904eb2d75088697fff1d2df36f04601e89f
- SHA256
  
  d6639b188677afe644975279d88a3632a4bf89a17119020222c35301ec96e4ac
- SHA512
  
  ff5ada9e0fb39ce6875ddaf43504cd9aab9c6316b4e751d6201d3f5ac9e321da5153b58b0d1c3a80a6d0589fc605342f7ba5f302c9f3c3232c0867c0dd965559
- SSDEEP
  
  6144:lrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzI:lrfu6/eIo4XwlWKM231t5UnRr3DdRp5d
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2