f806724b2c138d09f0b0a5b9383df4d82621f481a7b434420708556823d40782 | Triage

Sharing

General

Target

f806724b2c138d09f0b0a5b9383df4d82621f481a7b434420708556823d40782
Size

325KB
Sample

221123-hr3bdsec85
MD5

5d979587fe038dee1f922b9b1f3d3d33
SHA1

f1e273bbe6ea6ba7df56e1f7355c440bb66af175
SHA256

f806724b2c138d09f0b0a5b9383df4d82621f481a7b434420708556823d40782
SHA512

970acb5d102dc8e3e251377a44dc7ad570d2c9aa388981af3bd12bceee6637019a4f001993dde261594d2ee7131d1348d25ba902f92cf1b9123695c1a76091a1
SSDEEP

6144:8r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oI:8r1B3u6/eIo4ArVUBQCCYOqmO5oI

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f806724b2c138d09f0b0a5b9383df4d82621f481a7b434420708556823d40782
- Size
  
  325KB
- MD5
  
  5d979587fe038dee1f922b9b1f3d3d33
- SHA1
  
  f1e273bbe6ea6ba7df56e1f7355c440bb66af175
- SHA256
  
  f806724b2c138d09f0b0a5b9383df4d82621f481a7b434420708556823d40782
- SHA512
  
  970acb5d102dc8e3e251377a44dc7ad570d2c9aa388981af3bd12bceee6637019a4f001993dde261594d2ee7131d1348d25ba902f92cf1b9123695c1a76091a1
- SSDEEP
  
  6144:8r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oI:8r1B3u6/eIo4ArVUBQCCYOqmO5oI
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2