07a2fd98cd5ae36124250f429cc236b8b9f9419d0f688abd48c227c8a39f7f3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07a2fd98cd5ae36124250f429cc236b8b9f9419d0f688abd48c227c8a39f7f3d
Size

316KB
Sample

221002-ksqp4ahdhk
MD5

637a4e90505fc0c2ee41d2ef95b4d9d0
SHA1

842149a34256e9aa3c7d38e690493ee03a317f2f
SHA256

07a2fd98cd5ae36124250f429cc236b8b9f9419d0f688abd48c227c8a39f7f3d
SHA512

43a783e6ef291b0af4a8e7b40f8a28087692ca20add9136a5d0317978e9180cb122c7813b1ad160fda7cb2f0c9e152e006b1d3e4afbeccfbe3ddbd850efd3ee1
SSDEEP

6144:arabUzkuvcBYC47l2xgh2hyP9wUnIG2mQP6vxoG0rkKq:arDkuveY3N2eHnIPmQP6vqvy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  07a2fd98cd5ae36124250f429cc236b8b9f9419d0f688abd48c227c8a39f7f3d
- Size
  
  316KB
- MD5
  
  637a4e90505fc0c2ee41d2ef95b4d9d0
- SHA1
  
  842149a34256e9aa3c7d38e690493ee03a317f2f
- SHA256
  
  07a2fd98cd5ae36124250f429cc236b8b9f9419d0f688abd48c227c8a39f7f3d
- SHA512
  
  43a783e6ef291b0af4a8e7b40f8a28087692ca20add9136a5d0317978e9180cb122c7813b1ad160fda7cb2f0c9e152e006b1d3e4afbeccfbe3ddbd850efd3ee1
- SSDEEP
  
  6144:arabUzkuvcBYC47l2xgh2hyP9wUnIG2mQP6vxoG0rkKq:arDkuveY3N2eHnIPmQP6vqvy
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2