f574c7edb38f2aadedf0ca68e5b65477679ddb85ab71e51b12a674253721e351 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f574c7edb38f2aadedf0ca68e5b65477679ddb85ab71e51b12a674253721e351
Size

316KB
Sample

221127-nyhs8aec68
MD5

69e196cdc2e33a33e3d8dabb67271a39
SHA1

8c38522fa1c8f3867c3e2d8e476c2e14dc66db2b
SHA256

f574c7edb38f2aadedf0ca68e5b65477679ddb85ab71e51b12a674253721e351
SHA512

0dfdba87cb5e032c541763b69360bbbe676794a9833adddef1410c29536608ef1f4f1d8c717ae4a07a15c2e8f6506bdf4dfc4cc94c1e0c46aa14130040bdee9b
SSDEEP

6144:9rJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bSv:9r6kuveY3TT2XdGp9xRC4bSv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f574c7edb38f2aadedf0ca68e5b65477679ddb85ab71e51b12a674253721e351
- Size
  
  316KB
- MD5
  
  69e196cdc2e33a33e3d8dabb67271a39
- SHA1
  
  8c38522fa1c8f3867c3e2d8e476c2e14dc66db2b
- SHA256
  
  f574c7edb38f2aadedf0ca68e5b65477679ddb85ab71e51b12a674253721e351
- SHA512
  
  0dfdba87cb5e032c541763b69360bbbe676794a9833adddef1410c29536608ef1f4f1d8c717ae4a07a15c2e8f6506bdf4dfc4cc94c1e0c46aa14130040bdee9b
- SSDEEP
  
  6144:9rJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bSv:9r6kuveY3TT2XdGp9xRC4bSv
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2