e4771d5c8e6e016a29e2988bfbea482a6eac3c4e42942f8a60742d2ad586b60e | Triage

Sharing

General

Target

e4771d5c8e6e016a29e2988bfbea482a6eac3c4e42942f8a60742d2ad586b60e
Size

313KB
Sample

221123-h2chqaac2y
MD5

91f636c2e9b6c5a8752382f6fccac2a4
SHA1

db02bce45cff5af43c068d7ad90ca04b2c88b8c8
SHA256

e4771d5c8e6e016a29e2988bfbea482a6eac3c4e42942f8a60742d2ad586b60e
SHA512

f7fc8dee513c47c5258e6fb9a6d092a39d3bcf9a867fd072e7f84e2223bbcceb942f53d68a4311b9082bff55db8b13a990de4cc4b551253553f3c76c37b304d9
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LzK:3ryu6/eIo4vMResyEf0uP9d9UG0e

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e4771d5c8e6e016a29e2988bfbea482a6eac3c4e42942f8a60742d2ad586b60e
- Size
  
  313KB
- MD5
  
  91f636c2e9b6c5a8752382f6fccac2a4
- SHA1
  
  db02bce45cff5af43c068d7ad90ca04b2c88b8c8
- SHA256
  
  e4771d5c8e6e016a29e2988bfbea482a6eac3c4e42942f8a60742d2ad586b60e
- SHA512
  
  f7fc8dee513c47c5258e6fb9a6d092a39d3bcf9a867fd072e7f84e2223bbcceb942f53d68a4311b9082bff55db8b13a990de4cc4b551253553f3c76c37b304d9
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LzK:3ryu6/eIo4vMResyEf0uP9d9UG0e
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2