cfe881c65afa725b064ae8cc9e0c06828e13cdaf9ddd1617c77fa166506256f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfe881c65afa725b064ae8cc9e0c06828e13cdaf9ddd1617c77fa166506256f5
Size

303KB
Sample

221206-sv5wssdd9t
MD5

963040decb55349d35761a1ddee067e2
SHA1

7ea0161eac7cb4be15be7c9823d8210b5b9e2631
SHA256

cfe881c65afa725b064ae8cc9e0c06828e13cdaf9ddd1617c77fa166506256f5
SHA512

792cc25716fad20d78bb403991d4ad9d3976361aa83d26f9c022c5d6459437fa0e071cfe60e5ce5cf6ef03185840fe17c61404041152eb0c8c42ed0e5ac4a190
SSDEEP

6144:brkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7UB:brkX63yRl1uqM+gs+2RLTf+QLShvQx7S

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cfe881c65afa725b064ae8cc9e0c06828e13cdaf9ddd1617c77fa166506256f5
- Size
  
  303KB
- MD5
  
  963040decb55349d35761a1ddee067e2
- SHA1
  
  7ea0161eac7cb4be15be7c9823d8210b5b9e2631
- SHA256
  
  cfe881c65afa725b064ae8cc9e0c06828e13cdaf9ddd1617c77fa166506256f5
- SHA512
  
  792cc25716fad20d78bb403991d4ad9d3976361aa83d26f9c022c5d6459437fa0e071cfe60e5ce5cf6ef03185840fe17c61404041152eb0c8c42ed0e5ac4a190
- SSDEEP
  
  6144:brkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7UB:brkX63yRl1uqM+gs+2RLTf+QLShvQx7S
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2