e643d6ccf54fef803d1dd3f2e3355860c6de5443098007e39536b8e26fc43513 | Triage

Sharing

General

Target

e643d6ccf54fef803d1dd3f2e3355860c6de5443098007e39536b8e26fc43513
Size

325KB
Sample

221123-h1gfaaab71
MD5

38a381945b0c59f8704d758e9437fa2d
SHA1

09c08fdb5342a9cb428a1e161fb90a666cb8c223
SHA256

e643d6ccf54fef803d1dd3f2e3355860c6de5443098007e39536b8e26fc43513
SHA512

096fc4dade7ce13513da7b8c5098b83babca193de6f034e378844bace559b5ba27022f91ba1bae404b86621ec093fdff398dbbb2f9cbcef9fd798c48be4aab4b
SSDEEP

6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oA:kr1B3u6/eIo4ArVUBQCCYOqmO5oA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e643d6ccf54fef803d1dd3f2e3355860c6de5443098007e39536b8e26fc43513
- Size
  
  325KB
- MD5
  
  38a381945b0c59f8704d758e9437fa2d
- SHA1
  
  09c08fdb5342a9cb428a1e161fb90a666cb8c223
- SHA256
  
  e643d6ccf54fef803d1dd3f2e3355860c6de5443098007e39536b8e26fc43513
- SHA512
  
  096fc4dade7ce13513da7b8c5098b83babca193de6f034e378844bace559b5ba27022f91ba1bae404b86621ec093fdff398dbbb2f9cbcef9fd798c48be4aab4b
- SSDEEP
  
  6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oA:kr1B3u6/eIo4ArVUBQCCYOqmO5oA
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2