e3164e4d314b1bf1ea066bc59ab103d7055eb70d093ed6556efd4f1e20e72278 | Triage

Sharing

General

Target

e3164e4d314b1bf1ea066bc59ab103d7055eb70d093ed6556efd4f1e20e72278
Size

313KB
Sample

221123-h2xhwseg62
MD5

0b3011fe722d60392288f30e88599f19
SHA1

6c309fc6d9f1f91ead83d2f61ea8243192e1e52f
SHA256

e3164e4d314b1bf1ea066bc59ab103d7055eb70d093ed6556efd4f1e20e72278
SHA512

758be0b77509c21816da583547d0f829809a6c433f2352819a96493a52c146627410129ec7787d65cd62f0a7199a00ebd59292762df476057a0a2d633136be3a
SSDEEP

6144:oro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94d7:orAu6/eIo4s1yR9lsc/ad7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e3164e4d314b1bf1ea066bc59ab103d7055eb70d093ed6556efd4f1e20e72278
- Size
  
  313KB
- MD5
  
  0b3011fe722d60392288f30e88599f19
- SHA1
  
  6c309fc6d9f1f91ead83d2f61ea8243192e1e52f
- SHA256
  
  e3164e4d314b1bf1ea066bc59ab103d7055eb70d093ed6556efd4f1e20e72278
- SHA512
  
  758be0b77509c21816da583547d0f829809a6c433f2352819a96493a52c146627410129ec7787d65cd62f0a7199a00ebd59292762df476057a0a2d633136be3a
- SSDEEP
  
  6144:oro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94d7:orAu6/eIo4s1yR9lsc/ad7
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2