c04b65d21e7ff8914fbe111513fa90737b803461f6d4c655ec3e875d309b0f87 | Triage

Sharing

General

Target

c04b65d21e7ff8914fbe111513fa90737b803461f6d4c655ec3e875d309b0f87
Size

316KB
Sample

221124-dzmtfshd4x
MD5

2f939da3f0ea897a9e10a9a09b0f6bd4
SHA1

4257b7f10e36ec4ad7cd61340eeff4c1d30a7a07
SHA256

c04b65d21e7ff8914fbe111513fa90737b803461f6d4c655ec3e875d309b0f87
SHA512

ea2c822295d2d6b5bec805750c323e6df478ddb0581bf173eb449584153379c508b72aa518efb29ca9c0b27d5108affad7b09deefb74a8c9654290dd675143bb
SSDEEP

6144:trybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phod:trLkuveY3EMK9ObxD/06s5w3BLd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c04b65d21e7ff8914fbe111513fa90737b803461f6d4c655ec3e875d309b0f87
- Size
  
  316KB
- MD5
  
  2f939da3f0ea897a9e10a9a09b0f6bd4
- SHA1
  
  4257b7f10e36ec4ad7cd61340eeff4c1d30a7a07
- SHA256
  
  c04b65d21e7ff8914fbe111513fa90737b803461f6d4c655ec3e875d309b0f87
- SHA512
  
  ea2c822295d2d6b5bec805750c323e6df478ddb0581bf173eb449584153379c508b72aa518efb29ca9c0b27d5108affad7b09deefb74a8c9654290dd675143bb
- SSDEEP
  
  6144:trybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phod:trLkuveY3EMK9ObxD/06s5w3BLd
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2