ed740057d840cd341c0169f1b1a0034b338d0e0d8c7d8b7c3e946d32ee65b185 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed740057d840cd341c0169f1b1a0034b338d0e0d8c7d8b7c3e946d32ee65b185
Size

315KB
Sample

221020-s3326sbfbk
MD5

96a0d441deaee9cc8500ddd192dfd140
SHA1

7f1f14cdbda7222be0b6fe0d19e7c675aa1c28ab
SHA256

ed740057d840cd341c0169f1b1a0034b338d0e0d8c7d8b7c3e946d32ee65b185
SHA512

11c80ba4c9041726625a6a4ae8d2c6ca198548208c87ae2d7a464fd171974bbe9af47eb76fb259a6dc43bc3c39251b79202b25b3f23c8146968176bac239e744
SSDEEP

6144:OrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5r:OrdkuveY36kjZP/XKxlSZAHO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ed740057d840cd341c0169f1b1a0034b338d0e0d8c7d8b7c3e946d32ee65b185
- Size
  
  315KB
- MD5
  
  96a0d441deaee9cc8500ddd192dfd140
- SHA1
  
  7f1f14cdbda7222be0b6fe0d19e7c675aa1c28ab
- SHA256
  
  ed740057d840cd341c0169f1b1a0034b338d0e0d8c7d8b7c3e946d32ee65b185
- SHA512
  
  11c80ba4c9041726625a6a4ae8d2c6ca198548208c87ae2d7a464fd171974bbe9af47eb76fb259a6dc43bc3c39251b79202b25b3f23c8146968176bac239e744
- SSDEEP
  
  6144:OrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5r:OrdkuveY36kjZP/XKxlSZAHO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2