ced8f56fa22b3886b488cfe82d18c5b434224aaacc5b303a8c850e8e583c2f35 | Triage

Sharing

General

Target

ced8f56fa22b3886b488cfe82d18c5b434224aaacc5b303a8c850e8e583c2f35
Size

325KB
Sample

221123-ja6g6afb96
MD5

4399a3c3ef13fc48f910252f1d33ced9
SHA1

190983eb32294f17d98c40af0bb377bfd79790d8
SHA256

ced8f56fa22b3886b488cfe82d18c5b434224aaacc5b303a8c850e8e583c2f35
SHA512

4ad8c7d1f19028900e49eae708045c014a285936c54ac73907844e705b8de8e6b3a23beb1b08133c6051cf04dea3293adde5ba67492db08deb103bfe42b9e6f3
SSDEEP

6144:8r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oO:8r1B3u6/eIo4ArVUBQCCYOqmO5oO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ced8f56fa22b3886b488cfe82d18c5b434224aaacc5b303a8c850e8e583c2f35
- Size
  
  325KB
- MD5
  
  4399a3c3ef13fc48f910252f1d33ced9
- SHA1
  
  190983eb32294f17d98c40af0bb377bfd79790d8
- SHA256
  
  ced8f56fa22b3886b488cfe82d18c5b434224aaacc5b303a8c850e8e583c2f35
- SHA512
  
  4ad8c7d1f19028900e49eae708045c014a285936c54ac73907844e705b8de8e6b3a23beb1b08133c6051cf04dea3293adde5ba67492db08deb103bfe42b9e6f3
- SSDEEP
  
  6144:8r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oO:8r1B3u6/eIo4ArVUBQCCYOqmO5oO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2