0f4bdbf82191828d149b32b3d40f1b143d879f23736c368a70579f1bb21ec825 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f4bdbf82191828d149b32b3d40f1b143d879f23736c368a70579f1bb21ec825
Size

318KB
Sample

221206-t26x4sea56
MD5

59b320763aebd1aea8152d5cff79581e
SHA1

53b25e03a1083eb8d14964751028b2f1b8e6cd3e
SHA256

0f4bdbf82191828d149b32b3d40f1b143d879f23736c368a70579f1bb21ec825
SHA512

119de4b8270c569e40994959de2594ffc62a2511d6906240e6764a33f1d86ff3bf02c8fb5a6c94209cb8df568381d0f7b1ca2456a155681ad505fe9c99ddbbc3
SSDEEP

6144:tr4S6Y0JQBkQRl7174NpNUM+UHs+iBQ8+D07NHSavn+gQ5C9x5CsM:tr4S63yRl1uqM+gs+iOVAIwnHokKL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0f4bdbf82191828d149b32b3d40f1b143d879f23736c368a70579f1bb21ec825
- Size
  
  318KB
- MD5
  
  59b320763aebd1aea8152d5cff79581e
- SHA1
  
  53b25e03a1083eb8d14964751028b2f1b8e6cd3e
- SHA256
  
  0f4bdbf82191828d149b32b3d40f1b143d879f23736c368a70579f1bb21ec825
- SHA512
  
  119de4b8270c569e40994959de2594ffc62a2511d6906240e6764a33f1d86ff3bf02c8fb5a6c94209cb8df568381d0f7b1ca2456a155681ad505fe9c99ddbbc3
- SSDEEP
  
  6144:tr4S6Y0JQBkQRl7174NpNUM+UHs+iBQ8+D07NHSavn+gQ5C9x5CsM:tr4S63yRl1uqM+gs+iOVAIwnHokKL
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2