4f693f50236b46c354959ed6f7de84b72f8ea8a838e83e76894b77243183ef4e | Triage

Sharing

General

Target

4f693f50236b46c354959ed6f7de84b72f8ea8a838e83e76894b77243183ef4e
Size

327KB
Sample

221124-ed7geaae7v
MD5

b0b85dc5e2181a3fba6db838e467b2aa
SHA1

fd24bc1eb358fbede7809ef3b1d70766b696562b
SHA256

4f693f50236b46c354959ed6f7de84b72f8ea8a838e83e76894b77243183ef4e
SHA512

b12775700efce717b4a2c19ae800487bc6f4ebf3fd4a6a2ec458d2dbf87aac258431553d759b58ad2be760ce777828316835ef8122a0b48487bd43f555964e6d
SSDEEP

6144:VrVbUzkuvcBYC47l2xt81bM31jFryMm/+3pZasr0AtbgTtCybrNMcz:VrGkuveY38aExzr3pZh0d8EJ9z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4f693f50236b46c354959ed6f7de84b72f8ea8a838e83e76894b77243183ef4e
- Size
  
  327KB
- MD5
  
  b0b85dc5e2181a3fba6db838e467b2aa
- SHA1
  
  fd24bc1eb358fbede7809ef3b1d70766b696562b
- SHA256
  
  4f693f50236b46c354959ed6f7de84b72f8ea8a838e83e76894b77243183ef4e
- SHA512
  
  b12775700efce717b4a2c19ae800487bc6f4ebf3fd4a6a2ec458d2dbf87aac258431553d759b58ad2be760ce777828316835ef8122a0b48487bd43f555964e6d
- SSDEEP
  
  6144:VrVbUzkuvcBYC47l2xt81bM31jFryMm/+3pZasr0AtbgTtCybrNMcz:VrGkuveY38aExzr3pZh0d8EJ9z
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2