da19d146948dd976cd9be76b9ee3124c7716a05415f613ea465e12a61864a6cd | Triage

Sharing

General

Target

da19d146948dd976cd9be76b9ee3124c7716a05415f613ea465e12a61864a6cd
Size

313KB
Sample

221029-ndhbysdfb9
MD5

b29d02cef8a70c9597e02e8a5345e613
SHA1

dc1f433973534de0c59cf9839683813374707c64
SHA256

da19d146948dd976cd9be76b9ee3124c7716a05415f613ea465e12a61864a6cd
SHA512

1641dd8e152ac252630b2ee27afeeaa2514cb39c34466c9aad443e4dc84fc15638dba358ec3731c8f70775f02e7cf7c82f69ee44407922fefc4ea256fd502585
SSDEEP

6144:IrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDG:Irfu6/eIo4jVW5soVCcQovoO0DJM+ELB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  da19d146948dd976cd9be76b9ee3124c7716a05415f613ea465e12a61864a6cd
- Size
  
  313KB
- MD5
  
  b29d02cef8a70c9597e02e8a5345e613
- SHA1
  
  dc1f433973534de0c59cf9839683813374707c64
- SHA256
  
  da19d146948dd976cd9be76b9ee3124c7716a05415f613ea465e12a61864a6cd
- SHA512
  
  1641dd8e152ac252630b2ee27afeeaa2514cb39c34466c9aad443e4dc84fc15638dba358ec3731c8f70775f02e7cf7c82f69ee44407922fefc4ea256fd502585
- SSDEEP
  
  6144:IrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDG:Irfu6/eIo4jVW5soVCcQovoO0DJM+ELB
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2