e883a4a3d90054afa8a0da5835eba3183eba9eef19d13b7e98fbb0124d07cf1e | Triage

Sharing

General

Target

e883a4a3d90054afa8a0da5835eba3183eba9eef19d13b7e98fbb0124d07cf1e
Size

1.4MB
Sample

221030-klkkhacegq
MD5

47fa2b1225ab31d71a22e040e61ad6e0
SHA1

33691a246dcf14f8c8ddfaa6eb6ee4aaed813c4c
SHA256

e883a4a3d90054afa8a0da5835eba3183eba9eef19d13b7e98fbb0124d07cf1e
SHA512

a3feae312a4474678c2ece0b76e2ad8fe87aec1233615d3518e24f5c294b3d59506067a046838652d242938e230b52fe6781ff0a09c1a109d986b9563d616b6e
SSDEEP

24576:VNmF/mnBoDM5f7F2JQRKZk+61i5cCPWZj+VhL8OamPRKplJfVXT24WTEvzHJDsj:VYVZo5TcJQqk+61i5cYWZjSTDPYtfVjo

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  e883a4a3d90054afa8a0da5835eba3183eba9eef19d13b7e98fbb0124d07cf1e
- Size
  
  1.4MB
- MD5
  
  47fa2b1225ab31d71a22e040e61ad6e0
- SHA1
  
  33691a246dcf14f8c8ddfaa6eb6ee4aaed813c4c
- SHA256
  
  e883a4a3d90054afa8a0da5835eba3183eba9eef19d13b7e98fbb0124d07cf1e
- SHA512
  
  a3feae312a4474678c2ece0b76e2ad8fe87aec1233615d3518e24f5c294b3d59506067a046838652d242938e230b52fe6781ff0a09c1a109d986b9563d616b6e
- SSDEEP
  
  24576:VNmF/mnBoDM5f7F2JQRKZk+61i5cCPWZj+VhL8OamPRKplJfVXT24WTEvzHJDsj:VYVZo5TcJQqk+61i5cYWZjSTDPYtfVjo
Score

8^/10

discovery exploit
- Executes dropped EXE
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit