d170fca7d4d6d67e8fd24c26867c470c249fe2781f0ec25acfe9de3df843000e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d170fca7d4d6d67e8fd24c26867c470c249fe2781f0ec25acfe9de3df843000e
Size

314KB
Sample

221127-pe5djsbb8z
MD5

6241da602c5f0c8f1d111394f3daf9ee
SHA1

51cfadb5aaca33733f80129050c4d0bdcf369308
SHA256

d170fca7d4d6d67e8fd24c26867c470c249fe2781f0ec25acfe9de3df843000e
SHA512

74dedd4cdf670f1c21d09e85511705ad3f426efb42b0fe3271ebadc1e8bf0040c9137046bd44c3ce20273f020404001801304a741a1804aa3db5a3e72f444493
SSDEEP

6144:drYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5r:drdkuveY36kjZP/XKxlSZAH+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d170fca7d4d6d67e8fd24c26867c470c249fe2781f0ec25acfe9de3df843000e
- Size
  
  314KB
- MD5
  
  6241da602c5f0c8f1d111394f3daf9ee
- SHA1
  
  51cfadb5aaca33733f80129050c4d0bdcf369308
- SHA256
  
  d170fca7d4d6d67e8fd24c26867c470c249fe2781f0ec25acfe9de3df843000e
- SHA512
  
  74dedd4cdf670f1c21d09e85511705ad3f426efb42b0fe3271ebadc1e8bf0040c9137046bd44c3ce20273f020404001801304a741a1804aa3db5a3e72f444493
- SSDEEP
  
  6144:drYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5r:drdkuveY36kjZP/XKxlSZAH+
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2