fbfc35a9beffc666b0f3dbb95aebba383bbb0cba9107ff83b4339a0d8e0621d4 | Triage

Sharing

General

Target

fbfc35a9beffc666b0f3dbb95aebba383bbb0cba9107ff83b4339a0d8e0621d4
Size

327KB
Sample

221123-hqdxeahg21
MD5

fc87ff1bf3fd79a5a7b2349cf01c4bcf
SHA1

bd5bd6a7ceb2c706a9df60a5652afc2774a6af31
SHA256

fbfc35a9beffc666b0f3dbb95aebba383bbb0cba9107ff83b4339a0d8e0621d4
SHA512

241b40c586a3b1625047d2423e4e9818da2ce40dbab276976c5ae2945c086823eafd475d002079affedd835f6a186769c49eeb0a572fd63cd5eab5c15e55b60e
SSDEEP

6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FF:Br4iu6/eIo4Rsw33AtsmQs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fbfc35a9beffc666b0f3dbb95aebba383bbb0cba9107ff83b4339a0d8e0621d4
- Size
  
  327KB
- MD5
  
  fc87ff1bf3fd79a5a7b2349cf01c4bcf
- SHA1
  
  bd5bd6a7ceb2c706a9df60a5652afc2774a6af31
- SHA256
  
  fbfc35a9beffc666b0f3dbb95aebba383bbb0cba9107ff83b4339a0d8e0621d4
- SHA512
  
  241b40c586a3b1625047d2423e4e9818da2ce40dbab276976c5ae2945c086823eafd475d002079affedd835f6a186769c49eeb0a572fd63cd5eab5c15e55b60e
- SSDEEP
  
  6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FF:Br4iu6/eIo4Rsw33AtsmQs
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2