f18f54b03b2a854f228a364d789edf2d33b4974d935ae3f983c6f5eebd215d62 | Triage

Sharing

General

Target

f18f54b03b2a854f228a364d789edf2d33b4974d935ae3f983c6f5eebd215d62
Size

313KB
Sample

221123-hvwm1sed97
MD5

e61e6e08b9aec850446f3b38d82bf9c2
SHA1

338d71c2f86fe47b7747975446869d7c16a3ff40
SHA256

f18f54b03b2a854f228a364d789edf2d33b4974d935ae3f983c6f5eebd215d62
SHA512

a2190f821fd70c213068314504f67ab0f2bede50e7ef70fd974336596116eb7138e1136d8015b6fb52ac8f391fbffc62db88156bf8b0ea7c7103c377822f2a1f
SSDEEP

6144:Prb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMKF:PrRu6/eIo4t3PuFITKUAB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f18f54b03b2a854f228a364d789edf2d33b4974d935ae3f983c6f5eebd215d62
- Size
  
  313KB
- MD5
  
  e61e6e08b9aec850446f3b38d82bf9c2
- SHA1
  
  338d71c2f86fe47b7747975446869d7c16a3ff40
- SHA256
  
  f18f54b03b2a854f228a364d789edf2d33b4974d935ae3f983c6f5eebd215d62
- SHA512
  
  a2190f821fd70c213068314504f67ab0f2bede50e7ef70fd974336596116eb7138e1136d8015b6fb52ac8f391fbffc62db88156bf8b0ea7c7103c377822f2a1f
- SSDEEP
  
  6144:Prb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMKF:PrRu6/eIo4t3PuFITKUAB
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2