000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3aN
Size

23KB
Sample

241018-fpfcqs1hkr
MD5

630ead1567da1adcf9b4839b65931f40
SHA1

9ed7e421a2b08941035f6ff64f23b7e39b657ee1
SHA256

000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3a
SHA512

83b91fd0977f03a02b1cdb0cddb95bca3048d305c82938c387cff509eeb6fb06ea27bf40cc007ab992da56da7b3040f5186840d1fc668d35a2db95ae808ecc55
SSDEEP

384:HPzrvlCK/aPdRI/lc6xJDnojCohobUGO2G0c6uegLYo0qsq5OKh6:HPtp/gRIN/bojCohobUT2w6S70q8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3aN
- Size
  
  23KB
- MD5
  
  630ead1567da1adcf9b4839b65931f40
- SHA1
  
  9ed7e421a2b08941035f6ff64f23b7e39b657ee1
- SHA256
  
  000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3a
- SHA512
  
  83b91fd0977f03a02b1cdb0cddb95bca3048d305c82938c387cff509eeb6fb06ea27bf40cc007ab992da56da7b3040f5186840d1fc668d35a2db95ae808ecc55
- SSDEEP
  
  384:HPzrvlCK/aPdRI/lc6xJDnojCohobUGO2G0c6uegLYo0qsq5OKh6:HPtp/gRIN/bojCohobUT2w6S70q8
Score

7^/10

discovery
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2