26e8ca2b742795d3d65c0807909ba1c88a88a19424db9953aa28ec531c647d8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26e8ca2b742795d3d65c0807909ba1c88a88a19424db9953aa28ec531c647d8b
Size

316KB
Sample

221121-t1l7bahd82
MD5

340b415bfb8b04a86dff1665ad4a16a0
SHA1

e387267e5bad940d294d608f48d5dea5666c6874
SHA256

26e8ca2b742795d3d65c0807909ba1c88a88a19424db9953aa28ec531c647d8b
SHA512

62d67ced78fd64859740233907e5becdf66d7d8580b3d799bc028ca4b70ac05dfd3cc43054055f162176ca572646ad1508eec7b899683d12340c93fb60f8adc8
SSDEEP

6144:VrJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bSd:Vr6kuveY3TT2XdGp9xRC4bSd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  26e8ca2b742795d3d65c0807909ba1c88a88a19424db9953aa28ec531c647d8b
- Size
  
  316KB
- MD5
  
  340b415bfb8b04a86dff1665ad4a16a0
- SHA1
  
  e387267e5bad940d294d608f48d5dea5666c6874
- SHA256
  
  26e8ca2b742795d3d65c0807909ba1c88a88a19424db9953aa28ec531c647d8b
- SHA512
  
  62d67ced78fd64859740233907e5becdf66d7d8580b3d799bc028ca4b70ac05dfd3cc43054055f162176ca572646ad1508eec7b899683d12340c93fb60f8adc8
- SSDEEP
  
  6144:VrJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bSd:Vr6kuveY3TT2XdGp9xRC4bSd
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2