f51e41464d1f36418678f6d5abb261ea92350316a47a57f00f0dd2c1ddfedd90 | Triage

Sharing

General

Target

f51e41464d1f36418678f6d5abb261ea92350316a47a57f00f0dd2c1ddfedd90
Size

316KB
Sample

221123-hs6p7sed42
MD5

11c0486592a4a344dc6608373ee0785e
SHA1

8b08943534d44ec77fd958d3a4ab60d529e770fa
SHA256

f51e41464d1f36418678f6d5abb261ea92350316a47a57f00f0dd2c1ddfedd90
SHA512

e3c6391b4b1ad2d0985993618e3a4c82f7439aaa10be465e209c8763fa1aaf3b0be8c0c4f0c76f6da32e846638cf4841110758472fa4fb33523bc98d5a911666
SSDEEP

6144:2r+bUzkuvcBYC47l2xUa0nvmas+8gGxvzbLxS8YXsypuewKmiJ:2rXkuveY3z+U83tbLpmsgh/J

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f51e41464d1f36418678f6d5abb261ea92350316a47a57f00f0dd2c1ddfedd90
- Size
  
  316KB
- MD5
  
  11c0486592a4a344dc6608373ee0785e
- SHA1
  
  8b08943534d44ec77fd958d3a4ab60d529e770fa
- SHA256
  
  f51e41464d1f36418678f6d5abb261ea92350316a47a57f00f0dd2c1ddfedd90
- SHA512
  
  e3c6391b4b1ad2d0985993618e3a4c82f7439aaa10be465e209c8763fa1aaf3b0be8c0c4f0c76f6da32e846638cf4841110758472fa4fb33523bc98d5a911666
- SSDEEP
  
  6144:2r+bUzkuvcBYC47l2xUa0nvmas+8gGxvzbLxS8YXsypuewKmiJ:2rXkuveY3z+U83tbLpmsgh/J
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2