f40a79e0256bb443156c66e105f4c0e4876cc0e85ae4b0f598e724a35d4bcfcc | Triage

Sharing

General

Target

f40a79e0256bb443156c66e105f4c0e4876cc0e85ae4b0f598e724a35d4bcfcc
Size

304KB
Sample

221123-ktap9sch9x
MD5

373d2952a6394c94e4401e1179412a8c
SHA1

bf4b1eb6cd9c8c2338cb220a2eb274ddd3113908
SHA256

f40a79e0256bb443156c66e105f4c0e4876cc0e85ae4b0f598e724a35d4bcfcc
SHA512

306fe736e91d6e050ade6a2e255de139f83fedc20043cfd7c91881c58a52da372875399bde4f9836ab6b1d07774cda6d9a1fcdc967ae6c476541bc211a9333d2
SSDEEP

6144:trkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPK:trkuu6/eIo4tQW62T+uTwM6YVxm24K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f40a79e0256bb443156c66e105f4c0e4876cc0e85ae4b0f598e724a35d4bcfcc
- Size
  
  304KB
- MD5
  
  373d2952a6394c94e4401e1179412a8c
- SHA1
  
  bf4b1eb6cd9c8c2338cb220a2eb274ddd3113908
- SHA256
  
  f40a79e0256bb443156c66e105f4c0e4876cc0e85ae4b0f598e724a35d4bcfcc
- SHA512
  
  306fe736e91d6e050ade6a2e255de139f83fedc20043cfd7c91881c58a52da372875399bde4f9836ab6b1d07774cda6d9a1fcdc967ae6c476541bc211a9333d2
- SSDEEP
  
  6144:trkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPK:trkuu6/eIo4tQW62T+uTwM6YVxm24K
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2