c0f7552125997fd20ab9d568c8f04df06916e71e27e17a345ed956f16aeda330 | Triage

Sharing

General

Target

c0f7552125997fd20ab9d568c8f04df06916e71e27e17a345ed956f16aeda330
Size

314KB
Sample

221123-jhvevsfe79
MD5

1d3ac06c0893e12cb4f439a41fc0290c
SHA1

97354e667a19036840c4d470500488bdb118459f
SHA256

c0f7552125997fd20ab9d568c8f04df06916e71e27e17a345ed956f16aeda330
SHA512

c9e8278b00fb85e8befbf2583ce7a3978db6a996eea585aa565ba3841067ae7b953bc107fa8c0ef4f7756168828e25d60dd9afa95bca99bb8f6d963bc366b6b7
SSDEEP

6144:nribUzkuvcBYC47l2xdtqsnixBzO7F3PfLwXZoBxBY27vI6wIkhC900mE:nr7kuveY3yUFbO+Sb5wIGYB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c0f7552125997fd20ab9d568c8f04df06916e71e27e17a345ed956f16aeda330
- Size
  
  314KB
- MD5
  
  1d3ac06c0893e12cb4f439a41fc0290c
- SHA1
  
  97354e667a19036840c4d470500488bdb118459f
- SHA256
  
  c0f7552125997fd20ab9d568c8f04df06916e71e27e17a345ed956f16aeda330
- SHA512
  
  c9e8278b00fb85e8befbf2583ce7a3978db6a996eea585aa565ba3841067ae7b953bc107fa8c0ef4f7756168828e25d60dd9afa95bca99bb8f6d963bc366b6b7
- SSDEEP
  
  6144:nribUzkuvcBYC47l2xdtqsnixBzO7F3PfLwXZoBxBY27vI6wIkhC900mE:nr7kuveY3yUFbO+Sb5wIGYB
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2