c656eb0c5cd5344b9e10bbcd2b7cf8696a03457e0e8a78a16fa9a7459b384c58 | Triage

Sharing

General

Target

c656eb0c5cd5344b9e10bbcd2b7cf8696a03457e0e8a78a16fa9a7459b384c58
Size

313KB
Sample

221124-dx65baea78
MD5

4e585fe53ad2b89332ee6cb14927848d
SHA1

f9162c6db3ed88bf55942508a305a3d0293f6a96
SHA256

c656eb0c5cd5344b9e10bbcd2b7cf8696a03457e0e8a78a16fa9a7459b384c58
SHA512

cc91aad95583b4a5cb874af5f8f76c14bd1a17bbfea9a94fe39b8484337f00504a80a3d3fbcaeab271bd5b25d40f5ae9d80168eb82f63b6bd23e13047a6ebdb7
SSDEEP

6144:Rrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMg:RrRu6/eIo4t3PuFITKUAf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c656eb0c5cd5344b9e10bbcd2b7cf8696a03457e0e8a78a16fa9a7459b384c58
- Size
  
  313KB
- MD5
  
  4e585fe53ad2b89332ee6cb14927848d
- SHA1
  
  f9162c6db3ed88bf55942508a305a3d0293f6a96
- SHA256
  
  c656eb0c5cd5344b9e10bbcd2b7cf8696a03457e0e8a78a16fa9a7459b384c58
- SHA512
  
  cc91aad95583b4a5cb874af5f8f76c14bd1a17bbfea9a94fe39b8484337f00504a80a3d3fbcaeab271bd5b25d40f5ae9d80168eb82f63b6bd23e13047a6ebdb7
- SSDEEP
  
  6144:Rrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMg:RrRu6/eIo4t3PuFITKUAf
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2