2dddea1e7b82c87d193c829999eeb727cb69b58a8f242df796b84115c68bd7f5 | Triage

Sharing

General

Target

2dddea1e7b82c87d193c829999eeb727cb69b58a8f242df796b84115c68bd7f5
Size

327KB
Sample

221019-r9tawadacr
MD5

922a5df6dd70762dc1303ceebbea0ec0
SHA1

2ce356b7a84b5881a3a9235671eac3e7de677332
SHA256

2dddea1e7b82c87d193c829999eeb727cb69b58a8f242df796b84115c68bd7f5
SHA512

64175a08c14f64131200c3a5ecaa1d4525b9b9c888e9befaecac87b4596b4132d9e2d200c0a38059c1a42f9bcc6755c434170e2a8e0aeef5e507890946f075ad
SSDEEP

6144:2rqbUzkuvcBYC47l2x77R2sripFK+DR+uCjXextYUS3eO2cREtaNaH:2rTkuveY367RH4FnRajC9aQ0o

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2dddea1e7b82c87d193c829999eeb727cb69b58a8f242df796b84115c68bd7f5
- Size
  
  327KB
- MD5
  
  922a5df6dd70762dc1303ceebbea0ec0
- SHA1
  
  2ce356b7a84b5881a3a9235671eac3e7de677332
- SHA256
  
  2dddea1e7b82c87d193c829999eeb727cb69b58a8f242df796b84115c68bd7f5
- SHA512
  
  64175a08c14f64131200c3a5ecaa1d4525b9b9c888e9befaecac87b4596b4132d9e2d200c0a38059c1a42f9bcc6755c434170e2a8e0aeef5e507890946f075ad
- SSDEEP
  
  6144:2rqbUzkuvcBYC47l2x77R2sripFK+DR+uCjXextYUS3eO2cREtaNaH:2rTkuveY367RH4FnRajC9aQ0o
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2