f76cb3e367bdb91274d56bc56cb0dca29fdd8d0e4c95ec3d1992f442048f9998 | Triage

Sharing

General

Target

f76cb3e367bdb91274d56bc56cb0dca29fdd8d0e4c95ec3d1992f442048f9998
Size

304KB
Sample

221124-el73xabb4x
MD5

3b5d5b18a502db39c0d0353a6ac70134
SHA1

e8fc550e0556786618e9de7ccd655726ac52932f
SHA256

f76cb3e367bdb91274d56bc56cb0dca29fdd8d0e4c95ec3d1992f442048f9998
SHA512

637a1ca95b54a1b98046d28c499d1c4ad3018879cba1871eb76d1d2430b6207650e3a21edea9e235d9b4ca17f46001972be94e8ec06faf143fb65fc394757059
SSDEEP

6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPJ:drkuu6/eIo4tQW62T+uTwM6YVxm24J

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f76cb3e367bdb91274d56bc56cb0dca29fdd8d0e4c95ec3d1992f442048f9998
- Size
  
  304KB
- MD5
  
  3b5d5b18a502db39c0d0353a6ac70134
- SHA1
  
  e8fc550e0556786618e9de7ccd655726ac52932f
- SHA256
  
  f76cb3e367bdb91274d56bc56cb0dca29fdd8d0e4c95ec3d1992f442048f9998
- SHA512
  
  637a1ca95b54a1b98046d28c499d1c4ad3018879cba1871eb76d1d2430b6207650e3a21edea9e235d9b4ca17f46001972be94e8ec06faf143fb65fc394757059
- SSDEEP
  
  6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPJ:drkuu6/eIo4tQW62T+uTwM6YVxm24J
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2