d041dabeca1eb963541240cdbd8619068ed36a42e16d649c866e375dc4c99999 | Triage

Sharing

General

Target

d041dabeca1eb963541240cdbd8619068ed36a42e16d649c866e375dc4c99999
Size

1.4MB
Sample

221003-3xc9nschej
MD5

34dbc284ee742adf9ab6d0e749d55ab0
SHA1

91c50cef6a4d3bf1ed3ffbe70041a730932601d4
SHA256

d041dabeca1eb963541240cdbd8619068ed36a42e16d649c866e375dc4c99999
SHA512

a4a02a6e46adcee086d988d9034f68df1704b90b349ea973ea35ba68ee44e27302c3811349c7dd357fa32fe80c228399c6c619d032eee5813287b576662dce01
SSDEEP

24576:ONmF/mnBoDM5f7F2JQRKZk+61i5cCPWZj+VhL8OamPRKplJfVXT24WTEvzHJDsZ:OYVZo5TcJQqk+61i5cYWZjSTDPYtfVji

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  d041dabeca1eb963541240cdbd8619068ed36a42e16d649c866e375dc4c99999
- Size
  
  1.4MB
- MD5
  
  34dbc284ee742adf9ab6d0e749d55ab0
- SHA1
  
  91c50cef6a4d3bf1ed3ffbe70041a730932601d4
- SHA256
  
  d041dabeca1eb963541240cdbd8619068ed36a42e16d649c866e375dc4c99999
- SHA512
  
  a4a02a6e46adcee086d988d9034f68df1704b90b349ea973ea35ba68ee44e27302c3811349c7dd357fa32fe80c228399c6c619d032eee5813287b576662dce01
- SSDEEP
  
  24576:ONmF/mnBoDM5f7F2JQRKZk+61i5cCPWZj+VhL8OamPRKplJfVXT24WTEvzHJDsZ:OYVZo5TcJQqk+61i5cYWZjSTDPYtfVji
Score

8^/10

discovery exploit
- Executes dropped EXE
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit