ab7e69d397ad6e3b55714ac60ebfa96642108663353d5476fda78587a6c59aa3 | Triage

Sharing

General

Target

ab7e69d397ad6e3b55714ac60ebfa96642108663353d5476fda78587a6c59aa3
Size

316KB
Sample

221107-k6l9tshcc6
MD5

2a2184e2f629e855d589d0f2be711407
SHA1

9b51c8e5a658ed78b1680b648806cc45c13eb542
SHA256

ab7e69d397ad6e3b55714ac60ebfa96642108663353d5476fda78587a6c59aa3
SHA512

9f7cddb3f9b9a8df0b6f9d87cd7b66e411ce7df564480d80a67e9b6f3b46f301cdaf6521d571457239f61fda3a488afe4bde864543f36c55944079f8da0e506f
SSDEEP

6144:aribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xO:ar7kuveY33FJUo7MDkA6H

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ab7e69d397ad6e3b55714ac60ebfa96642108663353d5476fda78587a6c59aa3
- Size
  
  316KB
- MD5
  
  2a2184e2f629e855d589d0f2be711407
- SHA1
  
  9b51c8e5a658ed78b1680b648806cc45c13eb542
- SHA256
  
  ab7e69d397ad6e3b55714ac60ebfa96642108663353d5476fda78587a6c59aa3
- SHA512
  
  9f7cddb3f9b9a8df0b6f9d87cd7b66e411ce7df564480d80a67e9b6f3b46f301cdaf6521d571457239f61fda3a488afe4bde864543f36c55944079f8da0e506f
- SSDEEP
  
  6144:aribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xO:ar7kuveY33FJUo7MDkA6H
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2