34fa1501a436557d6c73ac5903513abb585174285d9c5b73cecc7ba52696cc12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34fa1501a436557d6c73ac5903513abb585174285d9c5b73cecc7ba52696cc12
Size

326KB
Sample

221029-etlvmsbehq
MD5

e05331877a974cf2241db2bc6b9e3f0b
SHA1

6e0b2cb3de12d2e847fbc3229a61026c55c6318f
SHA256

34fa1501a436557d6c73ac5903513abb585174285d9c5b73cecc7ba52696cc12
SHA512

d857769e9a94188413417be61c7702b72744c3a57798d13790e4c0decf32e231224b4dddc1aea1baaf5ad993047ab75d7f3c4a8ea4f60bf57e6c3fa895265b9f
SSDEEP

6144:yr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clg7:yr4gu6/eIo4nULZKMRwxuPfk6z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  34fa1501a436557d6c73ac5903513abb585174285d9c5b73cecc7ba52696cc12
- Size
  
  326KB
- MD5
  
  e05331877a974cf2241db2bc6b9e3f0b
- SHA1
  
  6e0b2cb3de12d2e847fbc3229a61026c55c6318f
- SHA256
  
  34fa1501a436557d6c73ac5903513abb585174285d9c5b73cecc7ba52696cc12
- SHA512
  
  d857769e9a94188413417be61c7702b72744c3a57798d13790e4c0decf32e231224b4dddc1aea1baaf5ad993047ab75d7f3c4a8ea4f60bf57e6c3fa895265b9f
- SSDEEP
  
  6144:yr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clg7:yr4gu6/eIo4nULZKMRwxuPfk6z
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2