f549f6c0fe471be5ea38e0652edd99ec2ecbe55ced50f6b92674ea5d4f262f8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f549f6c0fe471be5ea38e0652edd99ec2ecbe55ced50f6b92674ea5d4f262f8d
Size

327KB
Sample

221127-nm4ljsdd85
MD5

1016455b2f13e05ada55c4022fc8f1c6
SHA1

12e0d8510fc98bc305ca7030a5fcb9d97ec717f4
SHA256

f549f6c0fe471be5ea38e0652edd99ec2ecbe55ced50f6b92674ea5d4f262f8d
SHA512

21ad40ab328b02cf930294520352bea5841b01dbd79f6586322bc4be4ff02120d77c83694d509f55b47ebde1a2b710385da5a347faa2dfb528f76137530d4315
SSDEEP

6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FxB:xr4iu6/eIo4Rsw33AtsmQYB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f549f6c0fe471be5ea38e0652edd99ec2ecbe55ced50f6b92674ea5d4f262f8d
- Size
  
  327KB
- MD5
  
  1016455b2f13e05ada55c4022fc8f1c6
- SHA1
  
  12e0d8510fc98bc305ca7030a5fcb9d97ec717f4
- SHA256
  
  f549f6c0fe471be5ea38e0652edd99ec2ecbe55ced50f6b92674ea5d4f262f8d
- SHA512
  
  21ad40ab328b02cf930294520352bea5841b01dbd79f6586322bc4be4ff02120d77c83694d509f55b47ebde1a2b710385da5a347faa2dfb528f76137530d4315
- SSDEEP
  
  6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FxB:xr4iu6/eIo4Rsw33AtsmQYB
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2