fea164864a30b4b6da0885ede84218874425c58df5a89cf65f44966709995124 | Triage

Sharing

General

Target

fea164864a30b4b6da0885ede84218874425c58df5a89cf65f44966709995124
Size

304KB
Sample

221123-ksvdaach8t
MD5

73d8d06a77ce5977c6046b5af877f9df
SHA1

1e3305cbca634c6faa4f238b16322500d5fc74e3
SHA256

fea164864a30b4b6da0885ede84218874425c58df5a89cf65f44966709995124
SHA512

4abb2d5c55bc849b0ff2256ca9d523e7cc5373d1dd4b087ee68972c233724f7c5ee6e6b0765d8a0569d1c7c88002102f1fee938c176c54a3d47b05cc293e831b
SSDEEP

6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPg:Vrkuu6/eIo4tQW62T+uTwM6YVxm24g

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fea164864a30b4b6da0885ede84218874425c58df5a89cf65f44966709995124
- Size
  
  304KB
- MD5
  
  73d8d06a77ce5977c6046b5af877f9df
- SHA1
  
  1e3305cbca634c6faa4f238b16322500d5fc74e3
- SHA256
  
  fea164864a30b4b6da0885ede84218874425c58df5a89cf65f44966709995124
- SHA512
  
  4abb2d5c55bc849b0ff2256ca9d523e7cc5373d1dd4b087ee68972c233724f7c5ee6e6b0765d8a0569d1c7c88002102f1fee938c176c54a3d47b05cc293e831b
- SSDEEP
  
  6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPg:Vrkuu6/eIo4tQW62T+uTwM6YVxm24g
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2