3f4b8fd5c1972e82e4d656d751a848dc37ced113d8b97080ea4d1ed687279463 | Triage

Sharing

General

Target

3f4b8fd5c1972e82e4d656d751a848dc37ced113d8b97080ea4d1ed687279463
Size

313KB
Sample

221124-ee6w9saf5s
MD5

a534cccc0d31e6bd03fe1fd0aa170c8e
SHA1

349d91e4367448ba3db644017ece01873bc83332
SHA256

3f4b8fd5c1972e82e4d656d751a848dc37ced113d8b97080ea4d1ed687279463
SHA512

a6c0b4fb99c10215a987b38c779df5b63110150f135f3dc85376aff307054a9715896c58d3bf16e15b6c0d9dd39081eef92ae38c0783b9225bee9067327ad15f
SSDEEP

6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYOP:4rk4u6/eIo4nlu7trxFtApfgMyrpjYc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3f4b8fd5c1972e82e4d656d751a848dc37ced113d8b97080ea4d1ed687279463
- Size
  
  313KB
- MD5
  
  a534cccc0d31e6bd03fe1fd0aa170c8e
- SHA1
  
  349d91e4367448ba3db644017ece01873bc83332
- SHA256
  
  3f4b8fd5c1972e82e4d656d751a848dc37ced113d8b97080ea4d1ed687279463
- SHA512
  
  a6c0b4fb99c10215a987b38c779df5b63110150f135f3dc85376aff307054a9715896c58d3bf16e15b6c0d9dd39081eef92ae38c0783b9225bee9067327ad15f
- SSDEEP
  
  6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYOP:4rk4u6/eIo4nlu7trxFtApfgMyrpjYc
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2