64f18ca5432da83e68d8a5dafcccdfeabd2fc005a610d615cb5e9ffa67840bb9 | Triage

Sharing

General

Target

64f18ca5432da83e68d8a5dafcccdfeabd2fc005a610d615cb5e9ffa67840bb9
Size

314KB
Sample

221123-j8p8tsgf66
MD5

cde15dde35548358e909ac4d5776057c
SHA1

8c93f279b6ddf92d41e5bd81d04260409b2e29ec
SHA256

64f18ca5432da83e68d8a5dafcccdfeabd2fc005a610d615cb5e9ffa67840bb9
SHA512

b7ccb30d335f531b140dc4bf14ef3ac89a12f14e9d7b5d253cae910328618c1745d60fbc3f68af9aaaaa73c81b5aae3ca6ec5b4dd3af9be9290c8bb37e7d397b
SSDEEP

6144:Kr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVti:KrqkuveY3RnV6c800oIpbv0SVti

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  64f18ca5432da83e68d8a5dafcccdfeabd2fc005a610d615cb5e9ffa67840bb9
- Size
  
  314KB
- MD5
  
  cde15dde35548358e909ac4d5776057c
- SHA1
  
  8c93f279b6ddf92d41e5bd81d04260409b2e29ec
- SHA256
  
  64f18ca5432da83e68d8a5dafcccdfeabd2fc005a610d615cb5e9ffa67840bb9
- SHA512
  
  b7ccb30d335f531b140dc4bf14ef3ac89a12f14e9d7b5d253cae910328618c1745d60fbc3f68af9aaaaa73c81b5aae3ca6ec5b4dd3af9be9290c8bb37e7d397b
- SSDEEP
  
  6144:Kr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVti:KrqkuveY3RnV6c800oIpbv0SVti
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2