f602b6ba88db0d9af744d76e22c9d5958f2e5a3a36390004bb1a54c8a43f6cdd | Triage

Sharing

General

Target

f602b6ba88db0d9af744d76e22c9d5958f2e5a3a36390004bb1a54c8a43f6cdd
Size

313KB
Sample

221123-hstewaed29
MD5

12df2d40c4b3ee7984ea8ae8d8cf2061
SHA1

b9de6000c2089c16f275f70ab54a975a1d346e6d
SHA256

f602b6ba88db0d9af744d76e22c9d5958f2e5a3a36390004bb1a54c8a43f6cdd
SHA512

4a3dda090adad63e37c1979b582f6b009d55e3a596cdb6c7121f386a9d69326564321cd0037147b14a4e5490b421b5ac7e541f111177ec9c769b6d43c3e02b11
SSDEEP

6144:hrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMy:hrRu6/eIo4t3PuFITKUAt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f602b6ba88db0d9af744d76e22c9d5958f2e5a3a36390004bb1a54c8a43f6cdd
- Size
  
  313KB
- MD5
  
  12df2d40c4b3ee7984ea8ae8d8cf2061
- SHA1
  
  b9de6000c2089c16f275f70ab54a975a1d346e6d
- SHA256
  
  f602b6ba88db0d9af744d76e22c9d5958f2e5a3a36390004bb1a54c8a43f6cdd
- SHA512
  
  4a3dda090adad63e37c1979b582f6b009d55e3a596cdb6c7121f386a9d69326564321cd0037147b14a4e5490b421b5ac7e541f111177ec9c769b6d43c3e02b11
- SSDEEP
  
  6144:hrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMy:hrRu6/eIo4t3PuFITKUAt
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2