6e4bb6ca9b4819a326d36a04f671902e2b28c6b737dbb4959d749b530180fb0a | Triage

Sharing

General

Target

6e4bb6ca9b4819a326d36a04f671902e2b28c6b737dbb4959d749b530180fb0a
Size

326KB
Sample

221121-tt3wgsce61
MD5

103ee962d1362b967d7e6c8073402070
SHA1

d681dace7bc4a8a180502fdbae0c1c15ee874c01
SHA256

6e4bb6ca9b4819a326d36a04f671902e2b28c6b737dbb4959d749b530180fb0a
SHA512

0f6c9663642c909be0238eca1d934cc2e0f09cef1957adad2e046881af6ff55f67bd13808b728cea6090ad6a999b327a101e02863f122692789826940ae7eb21
SSDEEP

6144:rrvbUzkuvcBYC47l2xVH/INxwVVVP7bSD6c0oW5ZY9o:rrkkuveY3IWwVVVP7bbjZoo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6e4bb6ca9b4819a326d36a04f671902e2b28c6b737dbb4959d749b530180fb0a
- Size
  
  326KB
- MD5
  
  103ee962d1362b967d7e6c8073402070
- SHA1
  
  d681dace7bc4a8a180502fdbae0c1c15ee874c01
- SHA256
  
  6e4bb6ca9b4819a326d36a04f671902e2b28c6b737dbb4959d749b530180fb0a
- SHA512
  
  0f6c9663642c909be0238eca1d934cc2e0f09cef1957adad2e046881af6ff55f67bd13808b728cea6090ad6a999b327a101e02863f122692789826940ae7eb21
- SSDEEP
  
  6144:rrvbUzkuvcBYC47l2xVH/INxwVVVP7bSD6c0oW5ZY9o:rrkkuveY3IWwVVVP7bbjZoo
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2