849f32f08d76954563e93f64ff1e6b021e4544ee8d8c47fe64332ced4fcd2410 | Triage

Sharing

General

Target

849f32f08d76954563e93f64ff1e6b021e4544ee8d8c47fe64332ced4fcd2410
Size

304KB
Sample

221124-epfstsbd2s
MD5

c67bcbdee50a0893a68d9251bde9e19d
SHA1

a5207d0522e73fdc5e777cb93153691ed7b63a23
SHA256

849f32f08d76954563e93f64ff1e6b021e4544ee8d8c47fe64332ced4fcd2410
SHA512

69041176ebb74661bf608c75780ca6e82133a5e762008c2fe5382e94c98bd0fc07e9ddf428155d88844002adfa593be0cfb067bf9b21e78862ee138518afef47
SSDEEP

6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPs:drkuu6/eIo4tQW62T+uTwM6YVxm24s

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  849f32f08d76954563e93f64ff1e6b021e4544ee8d8c47fe64332ced4fcd2410
- Size
  
  304KB
- MD5
  
  c67bcbdee50a0893a68d9251bde9e19d
- SHA1
  
  a5207d0522e73fdc5e777cb93153691ed7b63a23
- SHA256
  
  849f32f08d76954563e93f64ff1e6b021e4544ee8d8c47fe64332ced4fcd2410
- SHA512
  
  69041176ebb74661bf608c75780ca6e82133a5e762008c2fe5382e94c98bd0fc07e9ddf428155d88844002adfa593be0cfb067bf9b21e78862ee138518afef47
- SSDEEP
  
  6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPs:drkuu6/eIo4tQW62T+uTwM6YVxm24s
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2