ca5a42d04c67bb10e4e9dabcdb7e6226c02cedf95229fca8aa4bb2d74d6c53a0 | Triage

Sharing

General

Target

ca5a42d04c67bb10e4e9dabcdb7e6226c02cedf95229fca8aa4bb2d74d6c53a0
Size

316KB
Sample

221012-s3jzashgcr
MD5

69c0228811eb64aafa68375526d01ae0
SHA1

ad31aa80d92c40492e7b04689261edd6be92303f
SHA256

ca5a42d04c67bb10e4e9dabcdb7e6226c02cedf95229fca8aa4bb2d74d6c53a0
SHA512

24222d1177a1828b6bd5f38c5055cce38b35e6dde98f2a5e8a0b838c76a1cb15a68f2dbf1132f63923022951540a28989fd5c3d5f3d05710158eb2412b874fe1
SSDEEP

6144:gr6bUzkuvcBYC47l2xvr8B113MzGl+DfOsLkwlOIdWq2st:grjkuveY37D3h8fO+sIdWq22

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ca5a42d04c67bb10e4e9dabcdb7e6226c02cedf95229fca8aa4bb2d74d6c53a0
- Size
  
  316KB
- MD5
  
  69c0228811eb64aafa68375526d01ae0
- SHA1
  
  ad31aa80d92c40492e7b04689261edd6be92303f
- SHA256
  
  ca5a42d04c67bb10e4e9dabcdb7e6226c02cedf95229fca8aa4bb2d74d6c53a0
- SHA512
  
  24222d1177a1828b6bd5f38c5055cce38b35e6dde98f2a5e8a0b838c76a1cb15a68f2dbf1132f63923022951540a28989fd5c3d5f3d05710158eb2412b874fe1
- SSDEEP
  
  6144:gr6bUzkuvcBYC47l2xvr8B113MzGl+DfOsLkwlOIdWq2st:grjkuveY37D3h8fO+sIdWq22
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2