f2443dabdd38fe38dfc88b930540e46ada709caf00fc127cc399a81fb15d575f | Triage

Sharing

General

Target

f2443dabdd38fe38dfc88b930540e46ada709caf00fc127cc399a81fb15d575f
Size

327KB
Sample

221125-yxckxscb73
MD5

56aa6bf6f86227e87cf36e2241f64968
SHA1

c37c9fd30e5985d14dd80df5e484f7a6fceeb277
SHA256

f2443dabdd38fe38dfc88b930540e46ada709caf00fc127cc399a81fb15d575f
SHA512

fe733cf3ef12264e486e228e5fb3034f81f6466395326f259ada670a08c86b459a4e29252d6d05557715bd4ad7d6014ed29fec7406205555c9d1d991f52022a2
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FU:Zr4iu6/eIo4Rsw33AtsmQt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f2443dabdd38fe38dfc88b930540e46ada709caf00fc127cc399a81fb15d575f
- Size
  
  327KB
- MD5
  
  56aa6bf6f86227e87cf36e2241f64968
- SHA1
  
  c37c9fd30e5985d14dd80df5e484f7a6fceeb277
- SHA256
  
  f2443dabdd38fe38dfc88b930540e46ada709caf00fc127cc399a81fb15d575f
- SHA512
  
  fe733cf3ef12264e486e228e5fb3034f81f6466395326f259ada670a08c86b459a4e29252d6d05557715bd4ad7d6014ed29fec7406205555c9d1d991f52022a2
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FU:Zr4iu6/eIo4Rsw33AtsmQt
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2