fd514cfe3cd75d8d7549cbe1303dfe6cafb51ed0afade7bebe20e2f358d16427 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd514cfe3cd75d8d7549cbe1303dfe6cafb51ed0afade7bebe20e2f358d16427
Size

313KB
Sample

221127-x89jcsgh2x
MD5

e3cdf1d59e61bb9fe137bd008df0f634
SHA1

de4845476f8b514bb3883dafc245bdbf85e9e538
SHA256

fd514cfe3cd75d8d7549cbe1303dfe6cafb51ed0afade7bebe20e2f358d16427
SHA512

87b3891453f85c19ad4bb5cc5ca4135523ddf8b9e237fb4524dea49dcb47bce0d3b82ddc9b8079a4156f219c1b2e2d18b519ccf3844aeec724d3f9c48f418a88
SSDEEP

6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lm:Xryu6/eIo4vMResyEf0uP9d9UG0m

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fd514cfe3cd75d8d7549cbe1303dfe6cafb51ed0afade7bebe20e2f358d16427
- Size
  
  313KB
- MD5
  
  e3cdf1d59e61bb9fe137bd008df0f634
- SHA1
  
  de4845476f8b514bb3883dafc245bdbf85e9e538
- SHA256
  
  fd514cfe3cd75d8d7549cbe1303dfe6cafb51ed0afade7bebe20e2f358d16427
- SHA512
  
  87b3891453f85c19ad4bb5cc5ca4135523ddf8b9e237fb4524dea49dcb47bce0d3b82ddc9b8079a4156f219c1b2e2d18b519ccf3844aeec724d3f9c48f418a88
- SSDEEP
  
  6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lm:Xryu6/eIo4vMResyEf0uP9d9UG0m
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2