fa2546d13e1e3d828013aad3daa06b4f0a7b3eff841bc91d57c7f58dbad707e1 | Triage

Sharing

General

Target

fa2546d13e1e3d828013aad3daa06b4f0a7b3eff841bc91d57c7f58dbad707e1
Size

312KB
Sample

221123-hq6x7aec57
MD5

489a106ebb7c6589a383346ba02cfb68
SHA1

bbb19a6f0f59560f42cd95526766cc55f1b4c487
SHA256

fa2546d13e1e3d828013aad3daa06b4f0a7b3eff841bc91d57c7f58dbad707e1
SHA512

dc3d420177877726ba91c472a3d72ed8813c95bc20fe0426c927cf9c0215217ddb9c15e60028b5771c6f3bebd5fa7668976c8b9cdf5067a531b46152a11eaa12
SSDEEP

6144:mrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM04:mrRu6/eIo4t3PuFITKUAw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fa2546d13e1e3d828013aad3daa06b4f0a7b3eff841bc91d57c7f58dbad707e1
- Size
  
  312KB
- MD5
  
  489a106ebb7c6589a383346ba02cfb68
- SHA1
  
  bbb19a6f0f59560f42cd95526766cc55f1b4c487
- SHA256
  
  fa2546d13e1e3d828013aad3daa06b4f0a7b3eff841bc91d57c7f58dbad707e1
- SHA512
  
  dc3d420177877726ba91c472a3d72ed8813c95bc20fe0426c927cf9c0215217ddb9c15e60028b5771c6f3bebd5fa7668976c8b9cdf5067a531b46152a11eaa12
- SSDEEP
  
  6144:mrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM04:mrRu6/eIo4t3PuFITKUAw
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2