0f5f71dbda4dde82836889305c2758185eca83ca0d049c0704da809f33cc00a4 | Triage

Sharing

General

Target

0f5f71dbda4dde82836889305c2758185eca83ca0d049c0704da809f33cc00a4
Size

315KB
Sample

221123-kp7t7shd73
MD5

e2cba7a281145a6b08ed2576e5f2a0a1
SHA1

e084949ddaa8112bc52b078b5fc5a4fd15b848b2
SHA256

0f5f71dbda4dde82836889305c2758185eca83ca0d049c0704da809f33cc00a4
SHA512

d1d8be9ea356cac73b9929789a9ce8893b9d18b97dda5914f4a7e059a36a22afcb9b0d418a46b5ec5a67c9b714312766201a88eb5653575e329d5835aac97949
SSDEEP

6144:OrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5h:OrdkuveY36kjZP/XKxlSZAHM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0f5f71dbda4dde82836889305c2758185eca83ca0d049c0704da809f33cc00a4
- Size
  
  315KB
- MD5
  
  e2cba7a281145a6b08ed2576e5f2a0a1
- SHA1
  
  e084949ddaa8112bc52b078b5fc5a4fd15b848b2
- SHA256
  
  0f5f71dbda4dde82836889305c2758185eca83ca0d049c0704da809f33cc00a4
- SHA512
  
  d1d8be9ea356cac73b9929789a9ce8893b9d18b97dda5914f4a7e059a36a22afcb9b0d418a46b5ec5a67c9b714312766201a88eb5653575e329d5835aac97949
- SSDEEP
  
  6144:OrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5h:OrdkuveY36kjZP/XKxlSZAHM
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2