350c71e03f98bf9123bf887473d99e4938de3c9bf809f8260d8817e9d071d2b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

350c71e03f98bf9123bf887473d99e4938de3c9bf809f8260d8817e9d071d2b1
Size

316KB
Sample

221019-r9c9nadabl
MD5

913db8271ff57c2f10757200d7154c60
SHA1

3f0a4ce77de587d974ba568ad0c77d1bae17c4d7
SHA256

350c71e03f98bf9123bf887473d99e4938de3c9bf809f8260d8817e9d071d2b1
SHA512

48eb80f28b5236f71900e6f8ff104cdc548ff2bf971b185eafd96709881c010763071f08fc01ed0e13a782d0f7a38ae86e0d921349a9f29d1bf719e8a2eb53ad
SSDEEP

6144:0rYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZB:0rdkuveY3CvI5Zdkj6OEu1HSB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  350c71e03f98bf9123bf887473d99e4938de3c9bf809f8260d8817e9d071d2b1
- Size
  
  316KB
- MD5
  
  913db8271ff57c2f10757200d7154c60
- SHA1
  
  3f0a4ce77de587d974ba568ad0c77d1bae17c4d7
- SHA256
  
  350c71e03f98bf9123bf887473d99e4938de3c9bf809f8260d8817e9d071d2b1
- SHA512
  
  48eb80f28b5236f71900e6f8ff104cdc548ff2bf971b185eafd96709881c010763071f08fc01ed0e13a782d0f7a38ae86e0d921349a9f29d1bf719e8a2eb53ad
- SSDEEP
  
  6144:0rYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZB:0rdkuveY3CvI5Zdkj6OEu1HSB
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2