4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b | Triage

Sharing

General

Target

4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b
Size

103KB
Sample

221123-vt2tvsch7w
MD5

d3729bec572c3bb8fe3f831d98fa7c94
SHA1

4a90fe86fd894eaf31b699f101e2cf3be2d31406
SHA256

4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b
SHA512

896806603a56b8239165db60d9c0d473b904f5d6f673fa7083b5424fdc4ab473aa2c2b8b8d3557e43d99be4e8af4ca28c341161ff990a2939e5ae42d46d8a827
SSDEEP

1536:cgKJn+wJf4nJtIJAz7z+Nc9sZrvrdPpbntnpn1nVn5n1nzJ3H1Tn1nVnZnxnZnth:cXJwE2fi4sZtuVmQ6h

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b
- Size
  
  103KB
- MD5
  
  d3729bec572c3bb8fe3f831d98fa7c94
- SHA1
  
  4a90fe86fd894eaf31b699f101e2cf3be2d31406
- SHA256
  
  4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b
- SHA512
  
  896806603a56b8239165db60d9c0d473b904f5d6f673fa7083b5424fdc4ab473aa2c2b8b8d3557e43d99be4e8af4ca28c341161ff990a2939e5ae42d46d8a827
- SSDEEP
  
  1536:cgKJn+wJf4nJtIJAz7z+Nc9sZrvrdPpbntnpn1nVn5n1nzJ3H1Tn1nVnZnxnZnth:cXJwE2fi4sZtuVmQ6h
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence