52e0372f765dac34586828db7d7b92943b44d027ebbbf430456ea0f92a02e352 | Triage

Sharing

General

Target

52e0372f765dac34586828db7d7b92943b44d027ebbbf430456ea0f92a02e352
Size

313KB
Sample

221029-nenv5adfe9
MD5

afb1e5d2708a2d55ca23575a0563879d
SHA1

f81557e9cba93bbcf39ba5100ca59714cf016bf2
SHA256

52e0372f765dac34586828db7d7b92943b44d027ebbbf430456ea0f92a02e352
SHA512

12438dbb2d0e48746358ccad90588a764c286b97889877c541dc2f01fc8fda085858813629f1e6e6aaa395fc553a8157536942819dcc4fc48e63bacdd65c12aa
SSDEEP

6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYyS:Ark4u6/eIo4nlu7trxFtApfgMyrpjYf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  52e0372f765dac34586828db7d7b92943b44d027ebbbf430456ea0f92a02e352
- Size
  
  313KB
- MD5
  
  afb1e5d2708a2d55ca23575a0563879d
- SHA1
  
  f81557e9cba93bbcf39ba5100ca59714cf016bf2
- SHA256
  
  52e0372f765dac34586828db7d7b92943b44d027ebbbf430456ea0f92a02e352
- SHA512
  
  12438dbb2d0e48746358ccad90588a764c286b97889877c541dc2f01fc8fda085858813629f1e6e6aaa395fc553a8157536942819dcc4fc48e63bacdd65c12aa
- SSDEEP
  
  6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYyS:Ark4u6/eIo4nlu7trxFtApfgMyrpjYf
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2