d1fb1feaf9c6a5866e11d1a459e8431285f6a93c49efebc9e0936c313926ae02 | Triage

Sharing

General

Target

d1fb1feaf9c6a5866e11d1a459e8431285f6a93c49efebc9e0936c313926ae02
Size

1.4MB
Sample

221107-g9ga7sccg3
MD5

1601b40ecb0d3c4b436166db2e483390
SHA1

62fe53dd32faabce546574de5e5d18607ac7c880
SHA256

d1fb1feaf9c6a5866e11d1a459e8431285f6a93c49efebc9e0936c313926ae02
SHA512

4129961ef053bbce0b628fcf47075ee0a8cd969190d88e03c2faf155e8d9c7446f7055c7e4ad5af2e5778a5616cb778a159f508dd906b78eef0ca89d5d475da6
SSDEEP

24576:gNmF/mnBoDM5f7F2/3ghdtdCczlEh7ThXBz2wB/MSe2Tp3I1gRUfbVx5rLIhkp8l:gYVZo5Tc/3g1XGh7VRz51ne0p4v7L81n

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  d1fb1feaf9c6a5866e11d1a459e8431285f6a93c49efebc9e0936c313926ae02
- Size
  
  1.4MB
- MD5
  
  1601b40ecb0d3c4b436166db2e483390
- SHA1
  
  62fe53dd32faabce546574de5e5d18607ac7c880
- SHA256
  
  d1fb1feaf9c6a5866e11d1a459e8431285f6a93c49efebc9e0936c313926ae02
- SHA512
  
  4129961ef053bbce0b628fcf47075ee0a8cd969190d88e03c2faf155e8d9c7446f7055c7e4ad5af2e5778a5616cb778a159f508dd906b78eef0ca89d5d475da6
- SSDEEP
  
  24576:gNmF/mnBoDM5f7F2/3ghdtdCczlEh7ThXBz2wB/MSe2Tp3I1gRUfbVx5rLIhkp8l:gYVZo5Tc/3g1XGh7VRz51ne0p4v7L81n
Score

8^/10

discovery exploit
- Executes dropped EXE
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit