6ee803dccb9498af197fc7c2c4d72006b1480ec62746e6ee7ce6c9ad05e9095e | Triage

Sharing

General

Target

6ee803dccb9498af197fc7c2c4d72006b1480ec62746e6ee7ce6c9ad05e9095e
Size

333KB
Sample

221019-r5rlgsccd3
MD5

a242d1343f9b41019a027c164bf9d050
SHA1

20e89ec5a0fcf2b2124d5b748a87f7750b13e1ec
SHA256

6ee803dccb9498af197fc7c2c4d72006b1480ec62746e6ee7ce6c9ad05e9095e
SHA512

297bd004c292bd91d32eab21e4cae986440d9d25dd7dff1fc5868163d3a115b461997b22b568cbc49a5cb3d16bb113065c02d67b73174c281553afa46fe3c8c8
SSDEEP

6144:Nrv3cZbUzkuvcBYC47l2xumtZILcVuFyrBdNH41uC1YuggdELNQvD:Nrv3cKkuveY3vmtZwcVuFyr1HA0YELGD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6ee803dccb9498af197fc7c2c4d72006b1480ec62746e6ee7ce6c9ad05e9095e
- Size
  
  333KB
- MD5
  
  a242d1343f9b41019a027c164bf9d050
- SHA1
  
  20e89ec5a0fcf2b2124d5b748a87f7750b13e1ec
- SHA256
  
  6ee803dccb9498af197fc7c2c4d72006b1480ec62746e6ee7ce6c9ad05e9095e
- SHA512
  
  297bd004c292bd91d32eab21e4cae986440d9d25dd7dff1fc5868163d3a115b461997b22b568cbc49a5cb3d16bb113065c02d67b73174c281553afa46fe3c8c8
- SSDEEP
  
  6144:Nrv3cZbUzkuvcBYC47l2xumtZILcVuFyrBdNH41uC1YuggdELNQvD:Nrv3cKkuveY3vmtZwcVuFyr1HA0YELGD
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2