8b9b9933f40636056fe8edd42c2c41373ef2bebd1ffc405e839483c60290b447 | Triage

Sharing

General

Target

CMIT-PRT-10.53-210030 Invoice No.1 _ Nov-3-2022.r01
Size

198KB
Sample

221123-gkgwfagc9y
MD5

7d7256b022ed735e62885468d8799523
SHA1

8fc63449cdd604fcbaa4040cc90a013a962cbc42
SHA256

8b9b9933f40636056fe8edd42c2c41373ef2bebd1ffc405e839483c60290b447
SHA512

ad405a1b658bc74d5298f0d1eb96305f0afea3685709d28d15692e08c88f26c446ad4890227392a51215b0b1b2511b76b9c4a8a7f4d2a7bf786f818f8a12b3ae
SSDEEP

3072:sRe3AcOihcl1INpd6M/OF2K58I/SOMDboNRJRmFfhtezDE39VX4sD7B9vk5f4:sRirOihPpd6kC0I7csPqPef0X4sD745g

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  CMIT-PRT-10.53-210030 Invoice No.1 _ Nov-3-2022.exe
- Size
  
  345KB
- MD5
  
  587a09e8ddc90f6c8790ab968871f6ee
- SHA1
  
  06804b45f5da82f496b62e4aa85c8060e9b895c5
- SHA256
  
  26b6db164a7b9adf2749c7834835b2e211a1307b9bfc7b04dd21493ec6edd2d7
- SHA512
  
  b1f014d8fc71c3290565feb9bf6a18f53e2a8c998ae8d2e52f35759f12969360f68e3b1a097e5f98125e3fed07e08b3735172228a9e5d795fb9b5630c6f45bd0
- SSDEEP
  
  6144:lYa64To0x7DlvxRV965w2cDL/JvvWWMzcnDSgjj/Ank55UB:lYeTo0x7DlvLS5w5f/JvNxneEzt5O
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2