e4dc1f707f16e71d1b82fba0ff667a5f1f342735cdb3a715f12a792a18ed2a72 | Triage

Sharing

General

Target

e4dc1f707f16e71d1b82fba0ff667a5f1f342735cdb3a715f12a792a18ed2a72
Size

313KB
Sample

221123-h161yaeg42
MD5

0cd07a712d4436319dfd77ab26f72e09
SHA1

fd7f16c41bbaf518ed8518664f162ef7e9850507
SHA256

e4dc1f707f16e71d1b82fba0ff667a5f1f342735cdb3a715f12a792a18ed2a72
SHA512

42a3db3e9589f32f54264b3f5dd317820637f1e7cdb839115b390abc80f77ede1a7ab0dd9880cc1f1b49e3ba3b9cb9ef64928a85183e9849b91138442e557913
SSDEEP

6144:ErK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lz:Eryu6/eIo4vMResyEf0uP9d9UG0z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e4dc1f707f16e71d1b82fba0ff667a5f1f342735cdb3a715f12a792a18ed2a72
- Size
  
  313KB
- MD5
  
  0cd07a712d4436319dfd77ab26f72e09
- SHA1
  
  fd7f16c41bbaf518ed8518664f162ef7e9850507
- SHA256
  
  e4dc1f707f16e71d1b82fba0ff667a5f1f342735cdb3a715f12a792a18ed2a72
- SHA512
  
  42a3db3e9589f32f54264b3f5dd317820637f1e7cdb839115b390abc80f77ede1a7ab0dd9880cc1f1b49e3ba3b9cb9ef64928a85183e9849b91138442e557913
- SSDEEP
  
  6144:ErK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lz:Eryu6/eIo4vMResyEf0uP9d9UG0z
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2