ba79ed567fc16fafde54c39a63fb543cad56156c79d3a1fb4e1cdd81e25780a3 | Triage

Sharing

General

Target

ba79ed567fc16fafde54c39a63fb543cad56156c79d3a1fb4e1cdd81e25780a3
Size

313KB
Sample

221002-2b3f1aegdr
MD5

3e8e1a9f763bbd7eebc5fce83330f780
SHA1

641f2237b8f18b07b92b8d575daec2fb363b1b6c
SHA256

ba79ed567fc16fafde54c39a63fb543cad56156c79d3a1fb4e1cdd81e25780a3
SHA512

6ae81e8a5f86f7a4874e45d3a093bd579e70276841153f39e3761d24c4fcd806a38528e7fe0799f1f4af559423479c91eaecfd25a97d975849c3c6418b24f885
SSDEEP

6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYJ:4rk4u6/eIo4nlu7trxFtApfgMyrpjYJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ba79ed567fc16fafde54c39a63fb543cad56156c79d3a1fb4e1cdd81e25780a3
- Size
  
  313KB
- MD5
  
  3e8e1a9f763bbd7eebc5fce83330f780
- SHA1
  
  641f2237b8f18b07b92b8d575daec2fb363b1b6c
- SHA256
  
  ba79ed567fc16fafde54c39a63fb543cad56156c79d3a1fb4e1cdd81e25780a3
- SHA512
  
  6ae81e8a5f86f7a4874e45d3a093bd579e70276841153f39e3761d24c4fcd806a38528e7fe0799f1f4af559423479c91eaecfd25a97d975849c3c6418b24f885
- SSDEEP
  
  6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYJ:4rk4u6/eIo4nlu7trxFtApfgMyrpjYJ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2