ee261b0704809a6e9010e92099e981ba640585fb8fa19f00d60b695d2818d0b5 | Triage

Sharing

General

Target

ee261b0704809a6e9010e92099e981ba640585fb8fa19f00d60b695d2818d0b5
Size

313KB
Sample

221019-rw7w4sbhb2
MD5

a17d1d549b0a12dbcabf70a5d69fa140
SHA1

27c467e71a4b87913862bbc1c3cbf8823dc5eb83
SHA256

ee261b0704809a6e9010e92099e981ba640585fb8fa19f00d60b695d2818d0b5
SHA512

4e1f67fa584744f373d58759442ce10119ef1721880cc007acc2db771993d51ff9dfdfd84301ebb2be3500df57c2bb77aca8d4b015a4d7213b09466a342c28a0
SSDEEP

6144:lrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzm:lrfu6/eIo4XwlWKM231t5UnRr3DdRp5P

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ee261b0704809a6e9010e92099e981ba640585fb8fa19f00d60b695d2818d0b5
- Size
  
  313KB
- MD5
  
  a17d1d549b0a12dbcabf70a5d69fa140
- SHA1
  
  27c467e71a4b87913862bbc1c3cbf8823dc5eb83
- SHA256
  
  ee261b0704809a6e9010e92099e981ba640585fb8fa19f00d60b695d2818d0b5
- SHA512
  
  4e1f67fa584744f373d58759442ce10119ef1721880cc007acc2db771993d51ff9dfdfd84301ebb2be3500df57c2bb77aca8d4b015a4d7213b09466a342c28a0
- SSDEEP
  
  6144:lrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzm:lrfu6/eIo4XwlWKM231t5UnRr3DdRp5P
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2