d640184f2839ee8ed545bc152734db17ea068caff1a193bfdd10f1581d6725e9 | Triage

Sharing

General

Target

d640184f2839ee8ed545bc152734db17ea068caff1a193bfdd10f1581d6725e9
Size

327KB
Sample

221123-h77wtafa79
MD5

15c54648f882ff14a64ab6bdb0077977
SHA1

5434cb305370f6dd6faeaf23a579b6c961dda6bf
SHA256

d640184f2839ee8ed545bc152734db17ea068caff1a193bfdd10f1581d6725e9
SHA512

f2f32b55274d7c8151fa6c8a4c815502e8ee0a06f4c82c660025a3fbc999af30ffd7d05a6ccc37441588855ccc665b540ef0d0388a8a2dd3b61b0bc6e0740e8f
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FY:Rr4iu6/eIo4Rsw33AtsmQx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d640184f2839ee8ed545bc152734db17ea068caff1a193bfdd10f1581d6725e9
- Size
  
  327KB
- MD5
  
  15c54648f882ff14a64ab6bdb0077977
- SHA1
  
  5434cb305370f6dd6faeaf23a579b6c961dda6bf
- SHA256
  
  d640184f2839ee8ed545bc152734db17ea068caff1a193bfdd10f1581d6725e9
- SHA512
  
  f2f32b55274d7c8151fa6c8a4c815502e8ee0a06f4c82c660025a3fbc999af30ffd7d05a6ccc37441588855ccc665b540ef0d0388a8a2dd3b61b0bc6e0740e8f
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FY:Rr4iu6/eIo4Rsw33AtsmQx
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2