f016a918f4bfa09ae81fccbd6849399d7403d341bc125fbecec6cff78c2a3ae2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f016a918f4bfa09ae81fccbd6849399d7403d341bc125fbecec6cff78c2a3ae2
Size

313KB
Sample

221127-kvze1sdf99
MD5

0246b74ec732ecda7a496fbca1cf1dbe
SHA1

d0f422a1e0b2fdd1070b858e6edc237c8b72532e
SHA256

f016a918f4bfa09ae81fccbd6849399d7403d341bc125fbecec6cff78c2a3ae2
SHA512

3d78d877455d61476b341ad6bbd4567c5d3fc35e9f5c6cf5090d9b802ffa5677a904012adf36524619b9005ea46281f676a3938a48e343fd34e35d32ae6e0698
SSDEEP

6144:Rrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMV:RrRu6/eIo4t3PuFITKUAC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f016a918f4bfa09ae81fccbd6849399d7403d341bc125fbecec6cff78c2a3ae2
- Size
  
  313KB
- MD5
  
  0246b74ec732ecda7a496fbca1cf1dbe
- SHA1
  
  d0f422a1e0b2fdd1070b858e6edc237c8b72532e
- SHA256
  
  f016a918f4bfa09ae81fccbd6849399d7403d341bc125fbecec6cff78c2a3ae2
- SHA512
  
  3d78d877455d61476b341ad6bbd4567c5d3fc35e9f5c6cf5090d9b802ffa5677a904012adf36524619b9005ea46281f676a3938a48e343fd34e35d32ae6e0698
- SSDEEP
  
  6144:Rrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMV:RrRu6/eIo4t3PuFITKUAC
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2