f5daa341c1531136ae877ae1b39eacbc295fcd1756fe83bbda70121d6a2e3c26 | Triage

Sharing

General

Target

f5daa341c1531136ae877ae1b39eacbc295fcd1756fe83bbda70121d6a2e3c26
Size

316KB
Sample

221127-3d6f4sbh41
MD5

06a8fa126cd5d06e666662a844bf1cc4
SHA1

2c138be8c5c70168cd9c289df3fecfc91a7567d9
SHA256

f5daa341c1531136ae877ae1b39eacbc295fcd1756fe83bbda70121d6a2e3c26
SHA512

4b9f1c2660e336b910894420e7e9cd179ff63f56aae5cd7045f11c9a022bbfc782ed665a7c4c7fc7f7e1300263e5257315d073d7c9959d3325b896453aa83b6a
SSDEEP

6144:RrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVsK:RrkkuveY3zhlV6tmDxzwV7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f5daa341c1531136ae877ae1b39eacbc295fcd1756fe83bbda70121d6a2e3c26
- Size
  
  316KB
- MD5
  
  06a8fa126cd5d06e666662a844bf1cc4
- SHA1
  
  2c138be8c5c70168cd9c289df3fecfc91a7567d9
- SHA256
  
  f5daa341c1531136ae877ae1b39eacbc295fcd1756fe83bbda70121d6a2e3c26
- SHA512
  
  4b9f1c2660e336b910894420e7e9cd179ff63f56aae5cd7045f11c9a022bbfc782ed665a7c4c7fc7f7e1300263e5257315d073d7c9959d3325b896453aa83b6a
- SSDEEP
  
  6144:RrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVsK:RrkkuveY3zhlV6tmDxzwV7
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2