304eca63e1faaf4f2893c0d1ac4a84d7321d26b36e1a64f0e08ed3eb8f45e2b4 | Triage

Sharing

General

Target

304eca63e1faaf4f2893c0d1ac4a84d7321d26b36e1a64f0e08ed3eb8f45e2b4
Size

314KB
Sample

221121-tz1cjshd64
MD5

30566903ca4cba4c7ba48698401d4770
SHA1

d752b04124a477a9318f6242dc61481d602b6026
SHA256

304eca63e1faaf4f2893c0d1ac4a84d7321d26b36e1a64f0e08ed3eb8f45e2b4
SHA512

7d9ec0f164f28352fb7b99518abe35a50d1e2dc8c785b64578857b41182712740b5c04dda25c1c3433470823129c025f6533575b7cf7990088cfedd872d3edaf
SSDEEP

6144:5reyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x91:5rzVm/kkuveY3MGWzlx7DMS7dG91

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  304eca63e1faaf4f2893c0d1ac4a84d7321d26b36e1a64f0e08ed3eb8f45e2b4
- Size
  
  314KB
- MD5
  
  30566903ca4cba4c7ba48698401d4770
- SHA1
  
  d752b04124a477a9318f6242dc61481d602b6026
- SHA256
  
  304eca63e1faaf4f2893c0d1ac4a84d7321d26b36e1a64f0e08ed3eb8f45e2b4
- SHA512
  
  7d9ec0f164f28352fb7b99518abe35a50d1e2dc8c785b64578857b41182712740b5c04dda25c1c3433470823129c025f6533575b7cf7990088cfedd872d3edaf
- SSDEEP
  
  6144:5reyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x91:5rzVm/kkuveY3MGWzlx7DMS7dG91
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2