cf48520138e348f0c6095e9524edd3bac2ce9b05c03ac75e7f46dab521c3d7dd | Triage

Sharing

General

Target

cf48520138e348f0c6095e9524edd3bac2ce9b05c03ac75e7f46dab521c3d7dd
Size

325KB
Sample

221124-dvrlvadh24
MD5

b3980e753f3b090516727d1e95c259ca
SHA1

da4f9ba60568b72823159489d0a06ae585b5a5a1
SHA256

cf48520138e348f0c6095e9524edd3bac2ce9b05c03ac75e7f46dab521c3d7dd
SHA512

57e60782deff87e2297efba133136a1eebb1f753f1119a6926fe2ffc78e03ac1c4cb5ae6be185d0d8c986a7e8437df9a6baeefe05ff659373506ec628c6fcbe7
SSDEEP

6144:8r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o/:8r1B3u6/eIo4ArVUBQCCYOqmO5o/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cf48520138e348f0c6095e9524edd3bac2ce9b05c03ac75e7f46dab521c3d7dd
- Size
  
  325KB
- MD5
  
  b3980e753f3b090516727d1e95c259ca
- SHA1
  
  da4f9ba60568b72823159489d0a06ae585b5a5a1
- SHA256
  
  cf48520138e348f0c6095e9524edd3bac2ce9b05c03ac75e7f46dab521c3d7dd
- SHA512
  
  57e60782deff87e2297efba133136a1eebb1f753f1119a6926fe2ffc78e03ac1c4cb5ae6be185d0d8c986a7e8437df9a6baeefe05ff659373506ec628c6fcbe7
- SSDEEP
  
  6144:8r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o/:8r1B3u6/eIo4ArVUBQCCYOqmO5o/
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2