faec1b7d1c5ebfc78ac615a0076911f73d54c685e6b7830eb8ed0d92db257e3e | Triage

Sharing

General

Target

faec1b7d1c5ebfc78ac615a0076911f73d54c685e6b7830eb8ed0d92db257e3e
Size

327KB
Sample

221123-hqv6paec46
MD5

73a8dc7be12ee5ea4bebe54469b74daf
SHA1

2b93e2fe0f6f08132d4f0e8c8fbf8a3ba19440b6
SHA256

faec1b7d1c5ebfc78ac615a0076911f73d54c685e6b7830eb8ed0d92db257e3e
SHA512

ff0694391de3747a11b95881827881f3430a7bf76f88cae38072b9965268fc1f335a402eebcbb5faecacd0f53e1f986f7668802dc2bde5c7e6bf834ca39f4012
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fh:Rr4iu6/eIo4Rsw33AtsmQo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  faec1b7d1c5ebfc78ac615a0076911f73d54c685e6b7830eb8ed0d92db257e3e
- Size
  
  327KB
- MD5
  
  73a8dc7be12ee5ea4bebe54469b74daf
- SHA1
  
  2b93e2fe0f6f08132d4f0e8c8fbf8a3ba19440b6
- SHA256
  
  faec1b7d1c5ebfc78ac615a0076911f73d54c685e6b7830eb8ed0d92db257e3e
- SHA512
  
  ff0694391de3747a11b95881827881f3430a7bf76f88cae38072b9965268fc1f335a402eebcbb5faecacd0f53e1f986f7668802dc2bde5c7e6bf834ca39f4012
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fh:Rr4iu6/eIo4Rsw33AtsmQo
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2