fe764ee9e103c64d0ef4a28a8716ba35f0d8e01c23be66176a808a8defbb8262 | Triage

Sharing

General

Target

fe764ee9e103c64d0ef4a28a8716ba35f0d8e01c23be66176a808a8defbb8262
Size

304KB
Sample

221123-ksvztach8v
MD5

ab87051008d0d70e13c3bc9ae52f29c9
SHA1

69aa97eaae8d193323298da6235bee1b03c922b3
SHA256

fe764ee9e103c64d0ef4a28a8716ba35f0d8e01c23be66176a808a8defbb8262
SHA512

c3fd88bdbd938cc1421b0f18ae7bc124278b5ea8dbb2dadd2fd8d8ebb4ed348d264d4002ed9fccb9c7cd433ae3ad0b2851bca2a644d3d5e57f399cc2c2455155
SSDEEP

6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPN:Vrkuu6/eIo4tQW62T+uTwM6YVxm24N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fe764ee9e103c64d0ef4a28a8716ba35f0d8e01c23be66176a808a8defbb8262
- Size
  
  304KB
- MD5
  
  ab87051008d0d70e13c3bc9ae52f29c9
- SHA1
  
  69aa97eaae8d193323298da6235bee1b03c922b3
- SHA256
  
  fe764ee9e103c64d0ef4a28a8716ba35f0d8e01c23be66176a808a8defbb8262
- SHA512
  
  c3fd88bdbd938cc1421b0f18ae7bc124278b5ea8dbb2dadd2fd8d8ebb4ed348d264d4002ed9fccb9c7cd433ae3ad0b2851bca2a644d3d5e57f399cc2c2455155
- SSDEEP
  
  6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPN:Vrkuu6/eIo4tQW62T+uTwM6YVxm24N
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2