97a5495c30d71d6502b48173e8baab8b1e7d1a6257c6b6e73ef08a678633abaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97a5495c30d71d6502b48173e8baab8b1e7d1a6257c6b6e73ef08a678633abaf
Size

316KB
Sample

221107-dpt5sagffm
MD5

0f568dac97eb4a404cd352fc6e960000
SHA1

7571d418643990ab03e2b8b1451f1d94db1f0046
SHA256

97a5495c30d71d6502b48173e8baab8b1e7d1a6257c6b6e73ef08a678633abaf
SHA512

0ac8cf4b9d112587c169eb418884a132310a181af7a01f75b5842a3ca1de6ceb77836c250d71a1e889ec90dda275645a28f62050b4cbc08a76a3157e34957df5
SSDEEP

6144:CribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xd:Cr7kuveY33FJUo7MDkA6Q

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  97a5495c30d71d6502b48173e8baab8b1e7d1a6257c6b6e73ef08a678633abaf
- Size
  
  316KB
- MD5
  
  0f568dac97eb4a404cd352fc6e960000
- SHA1
  
  7571d418643990ab03e2b8b1451f1d94db1f0046
- SHA256
  
  97a5495c30d71d6502b48173e8baab8b1e7d1a6257c6b6e73ef08a678633abaf
- SHA512
  
  0ac8cf4b9d112587c169eb418884a132310a181af7a01f75b5842a3ca1de6ceb77836c250d71a1e889ec90dda275645a28f62050b4cbc08a76a3157e34957df5
- SSDEEP
  
  6144:CribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xd:Cr7kuveY33FJUo7MDkA6Q
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2