e12fd0b24d7ac91bfb2d73f26f1396efeb75cfc1c0a6bbd487b28192ee580a6f | Triage

Sharing

General

Target

e12fd0b24d7ac91bfb2d73f26f1396efeb75cfc1c0a6bbd487b28192ee580a6f
Size

312KB
Sample

221123-h3lssaeg89
MD5

aa60937990c6e981f6fe4e2352257b8f
SHA1

37298f8bce7a0e5e3f5e1143338cd5ce679be5c8
SHA256

e12fd0b24d7ac91bfb2d73f26f1396efeb75cfc1c0a6bbd487b28192ee580a6f
SHA512

dffa725f39623447347137281793d0e5cc156aa2b80b1629b4d4445034704c27209c07fb2744064ca77a687c4a137b95a92eb71a1ab73baf125170890fa47bce
SSDEEP

6144:xrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iiR:xrkau6/eIo43ts7KcXgXAN7iw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e12fd0b24d7ac91bfb2d73f26f1396efeb75cfc1c0a6bbd487b28192ee580a6f
- Size
  
  312KB
- MD5
  
  aa60937990c6e981f6fe4e2352257b8f
- SHA1
  
  37298f8bce7a0e5e3f5e1143338cd5ce679be5c8
- SHA256
  
  e12fd0b24d7ac91bfb2d73f26f1396efeb75cfc1c0a6bbd487b28192ee580a6f
- SHA512
  
  dffa725f39623447347137281793d0e5cc156aa2b80b1629b4d4445034704c27209c07fb2744064ca77a687c4a137b95a92eb71a1ab73baf125170890fa47bce
- SSDEEP
  
  6144:xrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iiR:xrkau6/eIo43ts7KcXgXAN7iw
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2