c492cf46edf2c1fb362136f20edb8e75fce152942a96aff1e50040a9402a48ce | Triage

Sharing

General

Target

c492cf46edf2c1fb362136f20edb8e75fce152942a96aff1e50040a9402a48ce
Size

313KB
Sample

221123-jfvmvafd86
MD5

203adb9989e334d194417cd414e03434
SHA1

46cf316a5b96ea84fec6b30f7b5b023f65a8dc0a
SHA256

c492cf46edf2c1fb362136f20edb8e75fce152942a96aff1e50040a9402a48ce
SHA512

6b3a5f59743102a56aeb956b0c1ebd1fdc9e0706acef8c9501a0d75de28141c71f168ec7b9cc60d904b8b3c8de3b8a3e008661ade0b5d4663cae4f7461c3e0a4
SSDEEP

6144:Hrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMr:HrRu6/eIo4t3PuFITKUAc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c492cf46edf2c1fb362136f20edb8e75fce152942a96aff1e50040a9402a48ce
- Size
  
  313KB
- MD5
  
  203adb9989e334d194417cd414e03434
- SHA1
  
  46cf316a5b96ea84fec6b30f7b5b023f65a8dc0a
- SHA256
  
  c492cf46edf2c1fb362136f20edb8e75fce152942a96aff1e50040a9402a48ce
- SHA512
  
  6b3a5f59743102a56aeb956b0c1ebd1fdc9e0706acef8c9501a0d75de28141c71f168ec7b9cc60d904b8b3c8de3b8a3e008661ade0b5d4663cae4f7461c3e0a4
- SSDEEP
  
  6144:Hrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMr:HrRu6/eIo4t3PuFITKUAc
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2