2fe8cfd0e5ab77e888620841600c692b9fd4e89a8001d21b2abb2a2d1b855b9c | Triage

Sharing

General

Target

2fe8cfd0e5ab77e888620841600c692b9fd4e89a8001d21b2abb2a2d1b855b9c
Size

327KB
Sample

221123-khvlasce4w
MD5

9ab8e0925d20fc0d8577ec38e3bcfe29
SHA1

1c02952d4068fb6c9b18d0f13517105da7a28395
SHA256

2fe8cfd0e5ab77e888620841600c692b9fd4e89a8001d21b2abb2a2d1b855b9c
SHA512

ca40472f4b888a50ae8d1ea0c97cf6ad14c265ce958eba78872b4d59acafb873b0af57e88fe9d2ec1deed1940be1762270fa274e9b900308dd16e2dfa3d07cf6
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FS:Rr4iu6/eIo4Rsw33AtsmQT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2fe8cfd0e5ab77e888620841600c692b9fd4e89a8001d21b2abb2a2d1b855b9c
- Size
  
  327KB
- MD5
  
  9ab8e0925d20fc0d8577ec38e3bcfe29
- SHA1
  
  1c02952d4068fb6c9b18d0f13517105da7a28395
- SHA256
  
  2fe8cfd0e5ab77e888620841600c692b9fd4e89a8001d21b2abb2a2d1b855b9c
- SHA512
  
  ca40472f4b888a50ae8d1ea0c97cf6ad14c265ce958eba78872b4d59acafb873b0af57e88fe9d2ec1deed1940be1762270fa274e9b900308dd16e2dfa3d07cf6
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FS:Rr4iu6/eIo4Rsw33AtsmQT
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2