e27285594113229cad5acf7d0def4e145091f1e8237fa75b398960238967fcfa | Triage

Sharing

General

Target

e27285594113229cad5acf7d0def4e145091f1e8237fa75b398960238967fcfa
Size

325KB
Sample

221123-h23d5seg67
MD5

665585970a32bb71f04f73d8d3ebd450
SHA1

29c677bd6b06ddb4374fcafbd31d11ffa54945b7
SHA256

e27285594113229cad5acf7d0def4e145091f1e8237fa75b398960238967fcfa
SHA512

13184b8edbdfae69d67899bbe19a3b8249a05f385d7393b524d32fccb7d61cb18122bf98dfa73d10be2abd6a9daf34c07818545f526ce45b9fe45a10d8984dc9
SSDEEP

6144:Ur1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5om:Ur1B3u6/eIo4ArVUBQCCYOqmO5om

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e27285594113229cad5acf7d0def4e145091f1e8237fa75b398960238967fcfa
- Size
  
  325KB
- MD5
  
  665585970a32bb71f04f73d8d3ebd450
- SHA1
  
  29c677bd6b06ddb4374fcafbd31d11ffa54945b7
- SHA256
  
  e27285594113229cad5acf7d0def4e145091f1e8237fa75b398960238967fcfa
- SHA512
  
  13184b8edbdfae69d67899bbe19a3b8249a05f385d7393b524d32fccb7d61cb18122bf98dfa73d10be2abd6a9daf34c07818545f526ce45b9fe45a10d8984dc9
- SSDEEP
  
  6144:Ur1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5om:Ur1B3u6/eIo4ArVUBQCCYOqmO5om
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2