9e80fd0dcec51f51899df0fa2ecc80524dbc0891ecfbb2592efa7f07ddae3eeb | Triage

Sharing

General

Target

9e80fd0dcec51f51899df0fa2ecc80524dbc0891ecfbb2592efa7f07ddae3eeb
Size

315KB
Sample

221011-dvpggscegj
MD5

629ae91d50179d9fb67a630714f7bfe0
SHA1

274de2686bea4c95cadb18e7634a3a3409a38098
SHA256

9e80fd0dcec51f51899df0fa2ecc80524dbc0891ecfbb2592efa7f07ddae3eeb
SHA512

1d265222aae11d4224106e7a26e646dba5ed47c045d787a132286e99956627ac74f92826597a4f16c69ab31575d0737b06b9e07e4a8546ea4f3fe35ca9154ab5
SSDEEP

6144:YreyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x9b:YrzVm/kkuveY3MGWzlx7DMS7dG9b

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9e80fd0dcec51f51899df0fa2ecc80524dbc0891ecfbb2592efa7f07ddae3eeb
- Size
  
  315KB
- MD5
  
  629ae91d50179d9fb67a630714f7bfe0
- SHA1
  
  274de2686bea4c95cadb18e7634a3a3409a38098
- SHA256
  
  9e80fd0dcec51f51899df0fa2ecc80524dbc0891ecfbb2592efa7f07ddae3eeb
- SHA512
  
  1d265222aae11d4224106e7a26e646dba5ed47c045d787a132286e99956627ac74f92826597a4f16c69ab31575d0737b06b9e07e4a8546ea4f3fe35ca9154ab5
- SSDEEP
  
  6144:YreyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x9b:YrzVm/kkuveY3MGWzlx7DMS7dG9b
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2