e06342f081a7dfcd194ff2d7362de4b755591b3e2b3e4a8e1678a947c095ba96 | Triage

Sharing

General

Target

e06342f081a7dfcd194ff2d7362de4b755591b3e2b3e4a8e1678a947c095ba96
Size

313KB
Sample

221123-h3wmzseh22
MD5

871507fb4e94bbb695255c1e77f75689
SHA1

ae0c68c966b016ab9f85d5b1655b856fb9a9a2ff
SHA256

e06342f081a7dfcd194ff2d7362de4b755591b3e2b3e4a8e1678a947c095ba96
SHA512

7335615ccc07b5abe83c0135a2be32f01e9f7f224d56d4f80b7420c598f6d918ba040ea1962475bdc6e4c51eb644ebc57553ef109b8681c7bae8fbb58228bf8f
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lu:3ryu6/eIo4vMResyEf0uP9d9UG0u

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e06342f081a7dfcd194ff2d7362de4b755591b3e2b3e4a8e1678a947c095ba96
- Size
  
  313KB
- MD5
  
  871507fb4e94bbb695255c1e77f75689
- SHA1
  
  ae0c68c966b016ab9f85d5b1655b856fb9a9a2ff
- SHA256
  
  e06342f081a7dfcd194ff2d7362de4b755591b3e2b3e4a8e1678a947c095ba96
- SHA512
  
  7335615ccc07b5abe83c0135a2be32f01e9f7f224d56d4f80b7420c598f6d918ba040ea1962475bdc6e4c51eb644ebc57553ef109b8681c7bae8fbb58228bf8f
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lu:3ryu6/eIo4vMResyEf0uP9d9UG0u
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2