438dd626e46c907a36eea875b3a5f667481d49d530a25b1bdc0ac0c088c8cb1a | Triage

Sharing

General

Target

438dd626e46c907a36eea875b3a5f667481d49d530a25b1bdc0ac0c088c8cb1a
Size

326KB
Sample

221107-dyfzhshagj
MD5

0dcea32689a084a24f3a076ff06f4e40
SHA1

7011af158508bc4998c94bf59ba64dbcaa4c3c22
SHA256

438dd626e46c907a36eea875b3a5f667481d49d530a25b1bdc0ac0c088c8cb1a
SHA512

086ddc15315326f6fa6e8b6816a044cb7618f96b41374e40ca33071dc6d7fca937838fa05b88ea6962611a0c0f9dd2397917ccbfa306c8065903c9f11e3bb2e4
SSDEEP

6144:TrvbUzkuvcBYC47l2xVH/INxwVVVP7bSD6c0oW5ZY9Cf:TrkkuveY3IWwVVVP7bbjZo4

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  438dd626e46c907a36eea875b3a5f667481d49d530a25b1bdc0ac0c088c8cb1a
- Size
  
  326KB
- MD5
  
  0dcea32689a084a24f3a076ff06f4e40
- SHA1
  
  7011af158508bc4998c94bf59ba64dbcaa4c3c22
- SHA256
  
  438dd626e46c907a36eea875b3a5f667481d49d530a25b1bdc0ac0c088c8cb1a
- SHA512
  
  086ddc15315326f6fa6e8b6816a044cb7618f96b41374e40ca33071dc6d7fca937838fa05b88ea6962611a0c0f9dd2397917ccbfa306c8065903c9f11e3bb2e4
- SSDEEP
  
  6144:TrvbUzkuvcBYC47l2xVH/INxwVVVP7bSD6c0oW5ZY9Cf:TrkkuveY3IWwVVVP7bbjZo4
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2