e5ab112bc2942da1f618a8d9a656c18dc8d72fd40434c90dcb73bf8df11f8d27 | Triage

Sharing

General

Target

e5ab112bc2942da1f618a8d9a656c18dc8d72fd40434c90dcb73bf8df11f8d27
Size

326KB
Sample

221123-h1njlaab8y
MD5

92eeaf61732fd0ba90817fcf27781e72
SHA1

c98c9f25f22bc971aea74d2f013757dfe6c462c1
SHA256

e5ab112bc2942da1f618a8d9a656c18dc8d72fd40434c90dcb73bf8df11f8d27
SHA512

0977bbeccd09f3197232ee58fa051cfc40714a086c052b5d9b898e738461057a165d4387e168164ba2a828737a640ca121b2fdef48b3094fcdb94fc770c59ecf
SSDEEP

6144:2r4f9uEo2S1YnQmCX492DkwNP3qpYFAvZm2iODkqdNho9a8eua1BQ9GXk4HVqWUU:2r4Vu6/eIo41Zm2qo8UckXDVqW7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e5ab112bc2942da1f618a8d9a656c18dc8d72fd40434c90dcb73bf8df11f8d27
- Size
  
  326KB
- MD5
  
  92eeaf61732fd0ba90817fcf27781e72
- SHA1
  
  c98c9f25f22bc971aea74d2f013757dfe6c462c1
- SHA256
  
  e5ab112bc2942da1f618a8d9a656c18dc8d72fd40434c90dcb73bf8df11f8d27
- SHA512
  
  0977bbeccd09f3197232ee58fa051cfc40714a086c052b5d9b898e738461057a165d4387e168164ba2a828737a640ca121b2fdef48b3094fcdb94fc770c59ecf
- SSDEEP
  
  6144:2r4f9uEo2S1YnQmCX492DkwNP3qpYFAvZm2iODkqdNho9a8eua1BQ9GXk4HVqWUU:2r4Vu6/eIo41Zm2qo8UckXDVqW7
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2