f49621ab9aeff91a61380bcb651f5292771c74d546e903f86c9fd880298aebc3 | Triage

Sharing

General

Target

f49621ab9aeff91a61380bcb651f5292771c74d546e903f86c9fd880298aebc3
Size

313KB
Sample

221123-hth1jahh5v
MD5

90ac0d5ad8db5d58f92eabb79dc5b993
SHA1

ad1b8ee82000451508f42e051260bc6cae9d1f00
SHA256

f49621ab9aeff91a61380bcb651f5292771c74d546e903f86c9fd880298aebc3
SHA512

5ea61e693a0d2d51ec7a9ada970b78f5f71c70ad5cee9634b2eed8c9a5d8bec8afed6c3d8be09b2611dd7bc58814e224b1606b065922d866a2f9672a50ab670c
SSDEEP

6144:RrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYT:Rrk4u6/eIo4nlu7trxFtApfgMyrpjYT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f49621ab9aeff91a61380bcb651f5292771c74d546e903f86c9fd880298aebc3
- Size
  
  313KB
- MD5
  
  90ac0d5ad8db5d58f92eabb79dc5b993
- SHA1
  
  ad1b8ee82000451508f42e051260bc6cae9d1f00
- SHA256
  
  f49621ab9aeff91a61380bcb651f5292771c74d546e903f86c9fd880298aebc3
- SHA512
  
  5ea61e693a0d2d51ec7a9ada970b78f5f71c70ad5cee9634b2eed8c9a5d8bec8afed6c3d8be09b2611dd7bc58814e224b1606b065922d866a2f9672a50ab670c
- SSDEEP
  
  6144:RrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYT:Rrk4u6/eIo4nlu7trxFtApfgMyrpjYT
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2