6a340211f0e2bc3176a326c88bcfd9105584597c849140532fbfb25b8e4db76a | Triage

Sharing

General

Target

6a340211f0e2bc3176a326c88bcfd9105584597c849140532fbfb25b8e4db76a
Size

303KB
Sample

221206-tfrlasfc4s
MD5

ff6abd1ceef75febaf668891daa9e2d2
SHA1

75a04a645dac859d6fb2276317e57d3f2b9788c8
SHA256

6a340211f0e2bc3176a326c88bcfd9105584597c849140532fbfb25b8e4db76a
SHA512

4e1c8db41d228e2de2b3abbb465680a1e62cf3c39bb75b351204b30ce008223094e065fdcab543eda3d83dd113719576dcfb807d0ceaa2c2710cea7e0fec61c0
SSDEEP

6144:wrko9uEo2S1YnQmCX492DkwNP3qpYF2JA06CzL31tE5ioKpbgLoMmGvgk052lABR:wrkAu6/eIo4R/P1EioKMbmGvgZ2lAB/J

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6a340211f0e2bc3176a326c88bcfd9105584597c849140532fbfb25b8e4db76a
- Size
  
  303KB
- MD5
  
  ff6abd1ceef75febaf668891daa9e2d2
- SHA1
  
  75a04a645dac859d6fb2276317e57d3f2b9788c8
- SHA256
  
  6a340211f0e2bc3176a326c88bcfd9105584597c849140532fbfb25b8e4db76a
- SHA512
  
  4e1c8db41d228e2de2b3abbb465680a1e62cf3c39bb75b351204b30ce008223094e065fdcab543eda3d83dd113719576dcfb807d0ceaa2c2710cea7e0fec61c0
- SSDEEP
  
  6144:wrko9uEo2S1YnQmCX492DkwNP3qpYF2JA06CzL31tE5ioKpbgLoMmGvgk052lABR:wrkAu6/eIo4R/P1EioKMbmGvgZ2lAB/J
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2