f383dca3f9ddc2f10f61811789c02f6bc69d9c342cfcf16480f17d6232705b2d | Triage

Sharing

General

Target

f383dca3f9ddc2f10f61811789c02f6bc69d9c342cfcf16480f17d6232705b2d
Size

314KB
Sample

221123-ht553ahh7v
MD5

34fe8f010919e9f1b20e922871489f91
SHA1

ef29ce6537e4de9b0845bafef8ca587139a397f5
SHA256

f383dca3f9ddc2f10f61811789c02f6bc69d9c342cfcf16480f17d6232705b2d
SHA512

d838bd85c94d6d424d737b4121ff5f5b91d554fc2f7e364ab44353db13279de2f3dded88670d83d17cc709d2a751b80218de51169ea052cdfc66e48a6fa544a4
SSDEEP

6144:ArAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwN:Ar1kuveY35YO67Wxz7wN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f383dca3f9ddc2f10f61811789c02f6bc69d9c342cfcf16480f17d6232705b2d
- Size
  
  314KB
- MD5
  
  34fe8f010919e9f1b20e922871489f91
- SHA1
  
  ef29ce6537e4de9b0845bafef8ca587139a397f5
- SHA256
  
  f383dca3f9ddc2f10f61811789c02f6bc69d9c342cfcf16480f17d6232705b2d
- SHA512
  
  d838bd85c94d6d424d737b4121ff5f5b91d554fc2f7e364ab44353db13279de2f3dded88670d83d17cc709d2a751b80218de51169ea052cdfc66e48a6fa544a4
- SSDEEP
  
  6144:ArAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwN:Ar1kuveY35YO67Wxz7wN
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2