e55b107f2f169ad1c4b9537d64ab46e0394390a1148bb24b738fdc3b07723d77 | Triage

Sharing

General

Target

e55b107f2f169ad1c4b9537d64ab46e0394390a1148bb24b738fdc3b07723d77
Size

312KB
Sample

221123-h1tqlseg26
MD5

3ec6c36a90f299f96e766a5845154756
SHA1

418cc2c47c68a94ef5fe0071689eb41b454a4578
SHA256

e55b107f2f169ad1c4b9537d64ab46e0394390a1148bb24b738fdc3b07723d77
SHA512

a9432a88fd4b264ef368f5895eb0b446ff0d1d2149f675f40ff5e8a3230caf60c33ba0f8808896e7dd83041d1f0a063d545b6ed888b5c2c502d8755e7dd0cb8c
SSDEEP

6144:JrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iqc:Jrkau6/eIo43ts7KcXgXAN7iV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e55b107f2f169ad1c4b9537d64ab46e0394390a1148bb24b738fdc3b07723d77
- Size
  
  312KB
- MD5
  
  3ec6c36a90f299f96e766a5845154756
- SHA1
  
  418cc2c47c68a94ef5fe0071689eb41b454a4578
- SHA256
  
  e55b107f2f169ad1c4b9537d64ab46e0394390a1148bb24b738fdc3b07723d77
- SHA512
  
  a9432a88fd4b264ef368f5895eb0b446ff0d1d2149f675f40ff5e8a3230caf60c33ba0f8808896e7dd83041d1f0a063d545b6ed888b5c2c502d8755e7dd0cb8c
- SSDEEP
  
  6144:JrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iqc:Jrkau6/eIo43ts7KcXgXAN7iV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2