e34c1fde86afd212add744a57dc1b10c7947acc086ae75424bc06bdf23fd1889 | Triage

Sharing

General

Target

e34c1fde86afd212add744a57dc1b10c7947acc086ae75424bc06bdf23fd1889
Size

327KB
Sample

221123-h2rmmseg56
MD5

e855caa2e01662921ad730c6d6fb10cb
SHA1

8e50384505f7e8d30bd067d2b3e505eac45147f1
SHA256

e34c1fde86afd212add744a57dc1b10c7947acc086ae75424bc06bdf23fd1889
SHA512

7fcd0a3833b6e37111e97584f8d93745b16fd1a3f90dc0c56dcdc6c7ee1471e21ef31302fd439828fb2972a41cba22501a1439216baa1643da80f0c4838e2991
SSDEEP

6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FR:hr4iu6/eIo4Rsw33AtsmQ4

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e34c1fde86afd212add744a57dc1b10c7947acc086ae75424bc06bdf23fd1889
- Size
  
  327KB
- MD5
  
  e855caa2e01662921ad730c6d6fb10cb
- SHA1
  
  8e50384505f7e8d30bd067d2b3e505eac45147f1
- SHA256
  
  e34c1fde86afd212add744a57dc1b10c7947acc086ae75424bc06bdf23fd1889
- SHA512
  
  7fcd0a3833b6e37111e97584f8d93745b16fd1a3f90dc0c56dcdc6c7ee1471e21ef31302fd439828fb2972a41cba22501a1439216baa1643da80f0c4838e2991
- SSDEEP
  
  6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FR:hr4iu6/eIo4Rsw33AtsmQ4
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2