df8d9c649f98f25cb5295c0fb11460ecc12f866eec9ed6fad0066567640ac060 | Triage

Sharing

General

Target

df8d9c649f98f25cb5295c0fb11460ecc12f866eec9ed6fad0066567640ac060
Size

315KB
Sample

221124-dq2w1sde73
MD5

c96d55dfe034e6a94cafb51a228747b2
SHA1

784f9e7aa3bbd52d781a064a0542d106a2d975eb
SHA256

df8d9c649f98f25cb5295c0fb11460ecc12f866eec9ed6fad0066567640ac060
SHA512

6856a46cf5834ee686a5b01b8e9c542022405dac6b49bf6dd2632d3c7e2d396ea4f5a0faf7db5a947fb9bd6ecdbfc30935e6c547cb94ffe18965d7abbf8fa932
SSDEEP

6144:UrYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZO:UrdkuveY3CvI5Zdkj6OEu1HSO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  df8d9c649f98f25cb5295c0fb11460ecc12f866eec9ed6fad0066567640ac060
- Size
  
  315KB
- MD5
  
  c96d55dfe034e6a94cafb51a228747b2
- SHA1
  
  784f9e7aa3bbd52d781a064a0542d106a2d975eb
- SHA256
  
  df8d9c649f98f25cb5295c0fb11460ecc12f866eec9ed6fad0066567640ac060
- SHA512
  
  6856a46cf5834ee686a5b01b8e9c542022405dac6b49bf6dd2632d3c7e2d396ea4f5a0faf7db5a947fb9bd6ecdbfc30935e6c547cb94ffe18965d7abbf8fa932
- SSDEEP
  
  6144:UrYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZO:UrdkuveY3CvI5Zdkj6OEu1HSO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2