cf0349b129fba0ae5788f366dd255afc119c53cc22682e299d5ab957c8973843 | Triage

Sharing

General

Target

cf0349b129fba0ae5788f366dd255afc119c53cc22682e299d5ab957c8973843
Size

304KB
Sample

221124-em5deaga63
MD5

1ec40aac4dd5b4090dbef8462492bff6
SHA1

d5f9aa48c8dbca225f4c6e4df59bdba005f27eae
SHA256

cf0349b129fba0ae5788f366dd255afc119c53cc22682e299d5ab957c8973843
SHA512

f8cfb5e37923aab52959f90c04fc4e51d72cd18d7cbdbb8f004649eac193981f8a0d76c4a7641a849dd1d3a818e825219ef14553627a6de151b7a82253ae9a4d
SSDEEP

6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPC:drkuu6/eIo4tQW62T+uTwM6YVxm24C

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cf0349b129fba0ae5788f366dd255afc119c53cc22682e299d5ab957c8973843
- Size
  
  304KB
- MD5
  
  1ec40aac4dd5b4090dbef8462492bff6
- SHA1
  
  d5f9aa48c8dbca225f4c6e4df59bdba005f27eae
- SHA256
  
  cf0349b129fba0ae5788f366dd255afc119c53cc22682e299d5ab957c8973843
- SHA512
  
  f8cfb5e37923aab52959f90c04fc4e51d72cd18d7cbdbb8f004649eac193981f8a0d76c4a7641a849dd1d3a818e825219ef14553627a6de151b7a82253ae9a4d
- SSDEEP
  
  6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPC:drkuu6/eIo4tQW62T+uTwM6YVxm24C
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2