040e64f62f5952953f7267d88df79dfb20dd6d06725cf3a77c9cb9726e6e8638 | Triage

Sharing

General

Target

040e64f62f5952953f7267d88df79dfb20dd6d06725cf3a77c9cb9726e6e8638
Size

313KB
Sample

221123-kr54dsch5z
MD5

b461b6dd7fe631e57fe79995d5d46272
SHA1

283879c9700b7eb44d8bf050d45ae97466f0aab2
SHA256

040e64f62f5952953f7267d88df79dfb20dd6d06725cf3a77c9cb9726e6e8638
SHA512

ab2dde9b9319c0a6cf2ff93ea2f2dcce632d96db80804d152e3dd8527c901bff6375fa859a600b7c40b0f4cc370472bc8e3bf262e2cac3edb837930362a5fb49
SSDEEP

6144:Brb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMO:BrRu6/eIo4t3PuFITKUAp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  040e64f62f5952953f7267d88df79dfb20dd6d06725cf3a77c9cb9726e6e8638
- Size
  
  313KB
- MD5
  
  b461b6dd7fe631e57fe79995d5d46272
- SHA1
  
  283879c9700b7eb44d8bf050d45ae97466f0aab2
- SHA256
  
  040e64f62f5952953f7267d88df79dfb20dd6d06725cf3a77c9cb9726e6e8638
- SHA512
  
  ab2dde9b9319c0a6cf2ff93ea2f2dcce632d96db80804d152e3dd8527c901bff6375fa859a600b7c40b0f4cc370472bc8e3bf262e2cac3edb837930362a5fb49
- SSDEEP
  
  6144:Brb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMO:BrRu6/eIo4t3PuFITKUAp
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2