fdef6cdff2093dc54d27776c35ac1bbe5e7e30bdf4d1e154d553eea5dab7dd88 | Triage

Sharing

General

Target

fdef6cdff2093dc54d27776c35ac1bbe5e7e30bdf4d1e154d553eea5dab7dd88
Size

313KB
Sample

221123-hppmhseb89
MD5

c5eef77f2a19615340658f29d3676221
SHA1

fec94b22c25d51dccbd9c8a58e74bcea7b37ef81
SHA256

fdef6cdff2093dc54d27776c35ac1bbe5e7e30bdf4d1e154d553eea5dab7dd88
SHA512

e21a78ecc7a9551fd31cbcf78501d29b20ff7a6193bccc552acd2e117eae6ec0fd2fc2e88452050f9997648a92ce09ef0c172fc1030bea807f367955bce63f24
SSDEEP

6144:frK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LI:fryu6/eIo4vMResyEf0uP9d9UG0I

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fdef6cdff2093dc54d27776c35ac1bbe5e7e30bdf4d1e154d553eea5dab7dd88
- Size
  
  313KB
- MD5
  
  c5eef77f2a19615340658f29d3676221
- SHA1
  
  fec94b22c25d51dccbd9c8a58e74bcea7b37ef81
- SHA256
  
  fdef6cdff2093dc54d27776c35ac1bbe5e7e30bdf4d1e154d553eea5dab7dd88
- SHA512
  
  e21a78ecc7a9551fd31cbcf78501d29b20ff7a6193bccc552acd2e117eae6ec0fd2fc2e88452050f9997648a92ce09ef0c172fc1030bea807f367955bce63f24
- SSDEEP
  
  6144:frK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LI:fryu6/eIo4vMResyEf0uP9d9UG0I
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2