fa913ad2a5b6a39db18887b33945b5588b5c9529c17fc8180e0696eb646a13c6 | Triage

Sharing

General

Target

fa913ad2a5b6a39db18887b33945b5588b5c9529c17fc8180e0696eb646a13c6
Size

313KB
Sample

221123-hq1q6sec52
MD5

c4f86971977e0d685f49aef6f7381f37
SHA1

371ed054e17d1b2ef99a285d95274351db536604
SHA256

fa913ad2a5b6a39db18887b33945b5588b5c9529c17fc8180e0696eb646a13c6
SHA512

48919a8ac25c37142df2687c927ac15206a4334570f0d9c9246bbda0bf474a5c67e778feac37ebf55d0826438e8193c21ac9f529bbe15fd3303805c0390a421a
SSDEEP

6144:Brb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMM:BrRu6/eIo4t3PuFITKUAD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fa913ad2a5b6a39db18887b33945b5588b5c9529c17fc8180e0696eb646a13c6
- Size
  
  313KB
- MD5
  
  c4f86971977e0d685f49aef6f7381f37
- SHA1
  
  371ed054e17d1b2ef99a285d95274351db536604
- SHA256
  
  fa913ad2a5b6a39db18887b33945b5588b5c9529c17fc8180e0696eb646a13c6
- SHA512
  
  48919a8ac25c37142df2687c927ac15206a4334570f0d9c9246bbda0bf474a5c67e778feac37ebf55d0826438e8193c21ac9f529bbe15fd3303805c0390a421a
- SSDEEP
  
  6144:Brb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMM:BrRu6/eIo4t3PuFITKUAD
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2