fadff4b91bb2033acaea96fe0ce1cc54e0bb5106610bec8bf9a5e33ba077ce35 | Triage

Sharing

General

Target

fadff4b91bb2033acaea96fe0ce1cc54e0bb5106610bec8bf9a5e33ba077ce35
Size

316KB
Sample

221127-yszvnaee44
MD5

012f058645ae9e95e236631694d30e7a
SHA1

d9cbb25a2adc2607481bb1279765aed1b6b77ec6
SHA256

fadff4b91bb2033acaea96fe0ce1cc54e0bb5106610bec8bf9a5e33ba077ce35
SHA512

75d100e2cea15b07b0f3566c9f8edecfc4062028e8a554a867c59a1452c7b9860a8a0d5fb26984f9a9c942730ac6c30a8c95c7bcb841b5e6d5964d829b42e030
SSDEEP

6144:6rabUzkuvcBYC47l2xgh2hyP9wUnIG2mQP6vxoG0rkKe:6rDkuveY3N2eHnIPmQP6vqvG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fadff4b91bb2033acaea96fe0ce1cc54e0bb5106610bec8bf9a5e33ba077ce35
- Size
  
  316KB
- MD5
  
  012f058645ae9e95e236631694d30e7a
- SHA1
  
  d9cbb25a2adc2607481bb1279765aed1b6b77ec6
- SHA256
  
  fadff4b91bb2033acaea96fe0ce1cc54e0bb5106610bec8bf9a5e33ba077ce35
- SHA512
  
  75d100e2cea15b07b0f3566c9f8edecfc4062028e8a554a867c59a1452c7b9860a8a0d5fb26984f9a9c942730ac6c30a8c95c7bcb841b5e6d5964d829b42e030
- SSDEEP
  
  6144:6rabUzkuvcBYC47l2xgh2hyP9wUnIG2mQP6vxoG0rkKe:6rDkuveY3N2eHnIPmQP6vqvG
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2