cfd1d328f16c8a46e9dd7afc7d65e96bc637cdc014c046cae1baf1d4b337202c | Triage

Sharing

General

Target

cfd1d328f16c8a46e9dd7afc7d65e96bc637cdc014c046cae1baf1d4b337202c
Size

313KB
Sample

221123-jaqrpsfb83
MD5

5ded2afc729d875f827cdd9bf2c5d929
SHA1

c69737871104c586c29d6c4ddf94fecbace21b0c
SHA256

cfd1d328f16c8a46e9dd7afc7d65e96bc637cdc014c046cae1baf1d4b337202c
SHA512

bb089bad7b589951d4635ff9825dc7d2a8ffc5609357bc1e7ef10c46923258157a04f3eeac5cb55c5e9697bbdf2905d6638715462bcdd07ab9753a94fed55c39
SSDEEP

6144:orb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMQ:orRu6/eIo4t3PuFITKUAr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cfd1d328f16c8a46e9dd7afc7d65e96bc637cdc014c046cae1baf1d4b337202c
- Size
  
  313KB
- MD5
  
  5ded2afc729d875f827cdd9bf2c5d929
- SHA1
  
  c69737871104c586c29d6c4ddf94fecbace21b0c
- SHA256
  
  cfd1d328f16c8a46e9dd7afc7d65e96bc637cdc014c046cae1baf1d4b337202c
- SHA512
  
  bb089bad7b589951d4635ff9825dc7d2a8ffc5609357bc1e7ef10c46923258157a04f3eeac5cb55c5e9697bbdf2905d6638715462bcdd07ab9753a94fed55c39
- SSDEEP
  
  6144:orb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMQ:orRu6/eIo4t3PuFITKUAr
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2