2d516417801c2737d23e9ad75ccf30195614e3a9b1aa36cae109b2e4c0bfee06 | Triage

Sharing

General

Target

2d516417801c2737d23e9ad75ccf30195614e3a9b1aa36cae109b2e4c0bfee06
Size

313KB
Sample

221125-zgfs3sgf2z
MD5

f8b39c0c12776cc3b21b74c2a757e467
SHA1

b0f519e0f117cbc7fdc5848eeeddaa7fbbe44ae0
SHA256

2d516417801c2737d23e9ad75ccf30195614e3a9b1aa36cae109b2e4c0bfee06
SHA512

77d596d1f195cb8581563a52d4a7d632654ae6a9763c384766510fab067b836e0c6b194f5e249ca269c96779844472725d82134db64030413529a09244feb0e5
SSDEEP

6144:BrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDd:Brfu6/eIo4jVW5soVCcQovoO0DJM+EK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2d516417801c2737d23e9ad75ccf30195614e3a9b1aa36cae109b2e4c0bfee06
- Size
  
  313KB
- MD5
  
  f8b39c0c12776cc3b21b74c2a757e467
- SHA1
  
  b0f519e0f117cbc7fdc5848eeeddaa7fbbe44ae0
- SHA256
  
  2d516417801c2737d23e9ad75ccf30195614e3a9b1aa36cae109b2e4c0bfee06
- SHA512
  
  77d596d1f195cb8581563a52d4a7d632654ae6a9763c384766510fab067b836e0c6b194f5e249ca269c96779844472725d82134db64030413529a09244feb0e5
- SSDEEP
  
  6144:BrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDd:Brfu6/eIo4jVW5soVCcQovoO0DJM+EK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2