5fa02b15c74340c966530fee863857f7016f5ed8dcc91a86acdda0c4f09f2764 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fa02b15c74340c966530fee863857f7016f5ed8dcc91a86acdda0c4f09f2764
Size

301KB
Sample

221204-q5tkeaea97
MD5

0828cb70aeec65771422be75cdb90f00
SHA1

fa16a03865e8e448984fe97a1231b7ec97c0b925
SHA256

5fa02b15c74340c966530fee863857f7016f5ed8dcc91a86acdda0c4f09f2764
SHA512

9a498973c3791c4e9fc501cce6343015fcebdc60abc78c4cacafaed48dbb9f4fdb570700b1e9a7df5e00c68f08bb0c925f095bedaeb8e377f9f2a8ee7e162f8f
SSDEEP

6144:wrkX6Y0JQBkQRl7174NpNUM+UHs+Q4qfYgiMNSNXzsz4d+O5ddKHcZjMUtUS77u:wrkX63yRl1uqM+gs+1lGSNXzSopdgHcm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5fa02b15c74340c966530fee863857f7016f5ed8dcc91a86acdda0c4f09f2764
- Size
  
  301KB
- MD5
  
  0828cb70aeec65771422be75cdb90f00
- SHA1
  
  fa16a03865e8e448984fe97a1231b7ec97c0b925
- SHA256
  
  5fa02b15c74340c966530fee863857f7016f5ed8dcc91a86acdda0c4f09f2764
- SHA512
  
  9a498973c3791c4e9fc501cce6343015fcebdc60abc78c4cacafaed48dbb9f4fdb570700b1e9a7df5e00c68f08bb0c925f095bedaeb8e377f9f2a8ee7e162f8f
- SSDEEP
  
  6144:wrkX6Y0JQBkQRl7174NpNUM+UHs+Q4qfYgiMNSNXzsz4d+O5ddKHcZjMUtUS77u:wrkX63yRl1uqM+gs+1lGSNXzSopdgHcm
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2