f168ff85b3f29f6795bf3b9ab3290b62c3b0ea2f6a432c192eb6db6f5da91877 | Triage

Sharing

General

Target

f168ff85b3f29f6795bf3b9ab3290b62c3b0ea2f6a432c192eb6db6f5da91877
Size

314KB
Sample

221123-hvx6vahh9y
MD5

f9e4f609c3e6720a65e107909f05bc10
SHA1

fc7f94a92672f7fc9ad167b71181fe823761210c
SHA256

f168ff85b3f29f6795bf3b9ab3290b62c3b0ea2f6a432c192eb6db6f5da91877
SHA512

866b3f97fe7d02c612b22d71303f6edb9e865c53720be9be9b9493fe4debd866b678ed338bd177f260fe31cd47db9300bfd8c19cd946016996dd0fd08a169c16
SSDEEP

6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw8:Qr1kuveY35YO67Wxz7w8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f168ff85b3f29f6795bf3b9ab3290b62c3b0ea2f6a432c192eb6db6f5da91877
- Size
  
  314KB
- MD5
  
  f9e4f609c3e6720a65e107909f05bc10
- SHA1
  
  fc7f94a92672f7fc9ad167b71181fe823761210c
- SHA256
  
  f168ff85b3f29f6795bf3b9ab3290b62c3b0ea2f6a432c192eb6db6f5da91877
- SHA512
  
  866b3f97fe7d02c612b22d71303f6edb9e865c53720be9be9b9493fe4debd866b678ed338bd177f260fe31cd47db9300bfd8c19cd946016996dd0fd08a169c16
- SSDEEP
  
  6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw8:Qr1kuveY35YO67Wxz7w8
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2