dd4aa5e1a320c81fbe892e38fd54ef66158db7a7f2f8cea61c7fa331f17e98e9 | Triage

Sharing

General

Target

dd4aa5e1a320c81fbe892e38fd54ef66158db7a7f2f8cea61c7fa331f17e98e9
Size

313KB
Sample

221123-h5cb5aeh73
MD5

6ba3bf37dd66b9d9141a3f2e8a9c7fb7
SHA1

839b78519333e295bc89b435e87dd72ab078a7f2
SHA256

dd4aa5e1a320c81fbe892e38fd54ef66158db7a7f2f8cea61c7fa331f17e98e9
SHA512

624b12b2a5d2c8c198702049eb11ba6720e8e0e50e96b3692b3bc652eab69f70a70855e98b4ac92802b329f5f748514567a4712e257ca451684d69b41e53b4db
SSDEEP

6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lc:Hryu6/eIo4vMResyEf0uP9d9UG0c

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dd4aa5e1a320c81fbe892e38fd54ef66158db7a7f2f8cea61c7fa331f17e98e9
- Size
  
  313KB
- MD5
  
  6ba3bf37dd66b9d9141a3f2e8a9c7fb7
- SHA1
  
  839b78519333e295bc89b435e87dd72ab078a7f2
- SHA256
  
  dd4aa5e1a320c81fbe892e38fd54ef66158db7a7f2f8cea61c7fa331f17e98e9
- SHA512
  
  624b12b2a5d2c8c198702049eb11ba6720e8e0e50e96b3692b3bc652eab69f70a70855e98b4ac92802b329f5f748514567a4712e257ca451684d69b41e53b4db
- SSDEEP
  
  6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lc:Hryu6/eIo4vMResyEf0uP9d9UG0c
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2