a489ea6a86a3959225640ae7042085d9ffd45cf2b621a7a9c8205b57e706e345 | Triage

Sharing

General

Target

a489ea6a86a3959225640ae7042085d9ffd45cf2b621a7a9c8205b57e706e345
Size

314KB
Sample

221029-nj4r5sdhc3
MD5

b6ef076c16d2de2325a64140b358a09a
SHA1

80c4938ecb721db5133734552962723e2f6b5437
SHA256

a489ea6a86a3959225640ae7042085d9ffd45cf2b621a7a9c8205b57e706e345
SHA512

537b06402a22d055cd46faa97e20e03d14505834e9b0b598fa5338857ecb69b3cf7551de84c5cbc64460e2bb53a7a40ffeeb170d9b3a3d9484473b5509fa6761
SSDEEP

6144:drYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs54T:drdkuveY36kjZP/XKxlSZAHJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a489ea6a86a3959225640ae7042085d9ffd45cf2b621a7a9c8205b57e706e345
- Size
  
  314KB
- MD5
  
  b6ef076c16d2de2325a64140b358a09a
- SHA1
  
  80c4938ecb721db5133734552962723e2f6b5437
- SHA256
  
  a489ea6a86a3959225640ae7042085d9ffd45cf2b621a7a9c8205b57e706e345
- SHA512
  
  537b06402a22d055cd46faa97e20e03d14505834e9b0b598fa5338857ecb69b3cf7551de84c5cbc64460e2bb53a7a40ffeeb170d9b3a3d9484473b5509fa6761
- SSDEEP
  
  6144:drYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs54T:drdkuveY36kjZP/XKxlSZAHJ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2