6cdba2c07b79d46b1e8054cc445857fc8745db96618e13772f2b34398a2d6919 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cdba2c07b79d46b1e8054cc445857fc8745db96618e13772f2b34398a2d6919
Size

316KB
Sample

221121-tt6mdahb74
MD5

20da6967ab81a8c2e2617ad9a8fd6e90
SHA1

702a2fbf5392445e3012c3237d6396ec871883d0
SHA256

6cdba2c07b79d46b1e8054cc445857fc8745db96618e13772f2b34398a2d6919
SHA512

aa508a6e883007a5f7d5e1590c81e325b4a1f324d73d63033884b88e03b18ab23d8693cdfb76033267d38e9568d436ff692f431a1a7979225397647536bcde65
SSDEEP

6144:Ir6bUzkuvcBYC47l2xvr8B113MzGl+DfOsLkwlOIdWq2sc:IrjkuveY37D3h8fO+sIdWq23

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6cdba2c07b79d46b1e8054cc445857fc8745db96618e13772f2b34398a2d6919
- Size
  
  316KB
- MD5
  
  20da6967ab81a8c2e2617ad9a8fd6e90
- SHA1
  
  702a2fbf5392445e3012c3237d6396ec871883d0
- SHA256
  
  6cdba2c07b79d46b1e8054cc445857fc8745db96618e13772f2b34398a2d6919
- SHA512
  
  aa508a6e883007a5f7d5e1590c81e325b4a1f324d73d63033884b88e03b18ab23d8693cdfb76033267d38e9568d436ff692f431a1a7979225397647536bcde65
- SSDEEP
  
  6144:Ir6bUzkuvcBYC47l2xvr8B113MzGl+DfOsLkwlOIdWq2sc:IrjkuveY37D3h8fO+sIdWq23
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2