3f0b88d1c9a76657a56fbad6a6926502556923304862f2ea5aa6b95ffae805e8 | Triage

Sharing

General

Target

3f0b88d1c9a76657a56fbad6a6926502556923304862f2ea5aa6b95ffae805e8
Size

327KB
Sample

221123-kfcygaha39
MD5

e3e0ecc041e753f5f2dd04b6ef366f7b
SHA1

96458f1d0cbfe241be05f4774e63cc895a5af839
SHA256

3f0b88d1c9a76657a56fbad6a6926502556923304862f2ea5aa6b95ffae805e8
SHA512

4e32ed855b9768df324ed36494ea842f7a0718b01d21a82d7364d77b71656b2352b16ad262740a26710dd89f8b1be1a6c413684f26d721032accda9d386ba220
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F3q:Jr4iu6/eIo4Rsw33AtsmQaq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3f0b88d1c9a76657a56fbad6a6926502556923304862f2ea5aa6b95ffae805e8
- Size
  
  327KB
- MD5
  
  e3e0ecc041e753f5f2dd04b6ef366f7b
- SHA1
  
  96458f1d0cbfe241be05f4774e63cc895a5af839
- SHA256
  
  3f0b88d1c9a76657a56fbad6a6926502556923304862f2ea5aa6b95ffae805e8
- SHA512
  
  4e32ed855b9768df324ed36494ea842f7a0718b01d21a82d7364d77b71656b2352b16ad262740a26710dd89f8b1be1a6c413684f26d721032accda9d386ba220
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F3q:Jr4iu6/eIo4Rsw33AtsmQaq
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2