f6aaef5c2727c762e9ebb959f777a6dcb0fe5013c9828356d4a671da8ef88b82 | Triage

Sharing

General

Target

f6aaef5c2727c762e9ebb959f777a6dcb0fe5013c9828356d4a671da8ef88b82
Size

327KB
Sample

221125-ywp5maeh8s
MD5

75522cefc908e4d43afae41f7dddee4c
SHA1

3086b31b1d433e040cd29048d07e7fe92869034b
SHA256

f6aaef5c2727c762e9ebb959f777a6dcb0fe5013c9828356d4a671da8ef88b82
SHA512

16154d9b8d68eaa67b4448fc863858f089c134b943e684aae5b04b95312b01f6e166bf05a9a18f21dadc4a20b4bd16db4910152bcd24fb936b4106ea20b34cd8
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FU:Jr4iu6/eIo4Rsw33AtsmQR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f6aaef5c2727c762e9ebb959f777a6dcb0fe5013c9828356d4a671da8ef88b82
- Size
  
  327KB
- MD5
  
  75522cefc908e4d43afae41f7dddee4c
- SHA1
  
  3086b31b1d433e040cd29048d07e7fe92869034b
- SHA256
  
  f6aaef5c2727c762e9ebb959f777a6dcb0fe5013c9828356d4a671da8ef88b82
- SHA512
  
  16154d9b8d68eaa67b4448fc863858f089c134b943e684aae5b04b95312b01f6e166bf05a9a18f21dadc4a20b4bd16db4910152bcd24fb936b4106ea20b34cd8
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FU:Jr4iu6/eIo4Rsw33AtsmQR
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2