ec6827a643878d629bd854ff92bcea3ac6c8f01c46f3830ba08fa04d5cb2a005 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec6827a643878d629bd854ff92bcea3ac6c8f01c46f3830ba08fa04d5cb2a005
Size

334KB
Sample

221107-dfmpcadhf8
MD5

0e65f4f716a13d913ea8f340c45e6d70
SHA1

f72b3d00be0a2e758c3f6a5ab03fab4029156b8b
SHA256

ec6827a643878d629bd854ff92bcea3ac6c8f01c46f3830ba08fa04d5cb2a005
SHA512

bce6d72fe1d69d7bbc7baefd17066374bf044c683b5786569773cbd6ae4ef3a7bec1d88ee891f1be2605a847fc7f1650847eb1eef4c279b2110bf9b3057ace74
SSDEEP

6144:Krv3cdbUzkuvcBYC47l2xMuPqaRIGlz3K+idP2zf3QYerOISQ9Eq/q:Krv3cekuveY3r01z3O8fQYe5Gqq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ec6827a643878d629bd854ff92bcea3ac6c8f01c46f3830ba08fa04d5cb2a005
- Size
  
  334KB
- MD5
  
  0e65f4f716a13d913ea8f340c45e6d70
- SHA1
  
  f72b3d00be0a2e758c3f6a5ab03fab4029156b8b
- SHA256
  
  ec6827a643878d629bd854ff92bcea3ac6c8f01c46f3830ba08fa04d5cb2a005
- SHA512
  
  bce6d72fe1d69d7bbc7baefd17066374bf044c683b5786569773cbd6ae4ef3a7bec1d88ee891f1be2605a847fc7f1650847eb1eef4c279b2110bf9b3057ace74
- SSDEEP
  
  6144:Krv3cdbUzkuvcBYC47l2xMuPqaRIGlz3K+idP2zf3QYerOISQ9Eq/q:Krv3cekuveY3r01z3O8fQYe5Gqq
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2