e2e16b6d6b6d0121e423b8d0da87adfaf4e9e9e4e20da64e4b9c415530d6936e | Triage

Sharing

General

Target

e2e16b6d6b6d0121e423b8d0da87adfaf4e9e9e4e20da64e4b9c415530d6936e
Size

327KB
Sample

221123-h2zm9aac4y
MD5

548c35c51974edc4c0690b0fc223f4b0
SHA1

a08321b93698f18e6dd8a4d88bc53b41110839e1
SHA256

e2e16b6d6b6d0121e423b8d0da87adfaf4e9e9e4e20da64e4b9c415530d6936e
SHA512

8954960200f8ace6ede304bd2422e9212b8039aee37f5d45d5b54b550f1f71672ff5c4c352b4f2773572169bac9b26133038d0b33f3cd1d79e22a42d4d6a3f47
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fp:Jr4iu6/eIo4Rsw33AtsmQA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e2e16b6d6b6d0121e423b8d0da87adfaf4e9e9e4e20da64e4b9c415530d6936e
- Size
  
  327KB
- MD5
  
  548c35c51974edc4c0690b0fc223f4b0
- SHA1
  
  a08321b93698f18e6dd8a4d88bc53b41110839e1
- SHA256
  
  e2e16b6d6b6d0121e423b8d0da87adfaf4e9e9e4e20da64e4b9c415530d6936e
- SHA512
  
  8954960200f8ace6ede304bd2422e9212b8039aee37f5d45d5b54b550f1f71672ff5c4c352b4f2773572169bac9b26133038d0b33f3cd1d79e22a42d4d6a3f47
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fp:Jr4iu6/eIo4Rsw33AtsmQA
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2