f78f2b8e820e066fe31824a542c591e5d2c7096c500d866fc20e4a3ec9f865a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f78f2b8e820e066fe31824a542c591e5d2c7096c500d866fc20e4a3ec9f865a4
Size

314KB
Sample

221127-vzvmqsee46
MD5

6465a793e3f4bb69c70c5e969be4435d
SHA1

78347c64104733b16f1a31a65e0ba21cf315431b
SHA256

f78f2b8e820e066fe31824a542c591e5d2c7096c500d866fc20e4a3ec9f865a4
SHA512

a7ff49898cf9d90d140695548e7cd09a24045e5d08e0389f5d462f3c47b23a572c6d641171c5505d8e7a6f966367d232a5421d4523d60cc4bd91d9c593bb7f0c
SSDEEP

6144:YrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwA:Yr1kuveY35YO67Wxz7wA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f78f2b8e820e066fe31824a542c591e5d2c7096c500d866fc20e4a3ec9f865a4
- Size
  
  314KB
- MD5
  
  6465a793e3f4bb69c70c5e969be4435d
- SHA1
  
  78347c64104733b16f1a31a65e0ba21cf315431b
- SHA256
  
  f78f2b8e820e066fe31824a542c591e5d2c7096c500d866fc20e4a3ec9f865a4
- SHA512
  
  a7ff49898cf9d90d140695548e7cd09a24045e5d08e0389f5d462f3c47b23a572c6d641171c5505d8e7a6f966367d232a5421d4523d60cc4bd91d9c593bb7f0c
- SSDEEP
  
  6144:YrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwA:Yr1kuveY35YO67Wxz7wA
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2