d92ef8a798f3ee1abeb0550e651f5096a12afedd21bb7a41585457f8eb3136e7 | Triage

Sharing

General

Target

d92ef8a798f3ee1abeb0550e651f5096a12afedd21bb7a41585457f8eb3136e7
Size

313KB
Sample

221123-h62neafa45
MD5

8ca562a68dc066c9f105f273082cec58
SHA1

0e6692f4dce2cbd27f51cd54a78b7f85fb622f7c
SHA256

d92ef8a798f3ee1abeb0550e651f5096a12afedd21bb7a41585457f8eb3136e7
SHA512

b3c18a47dba6347d8fcaf70268e4f5cddcb99538343f7fc880f8b6f33982e6dc73c3c5213f3fc2335a2cee808eca29f9933aa25ebb51823a1b4872e7d5087e42
SSDEEP

6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYz:Ark4u6/eIo4nlu7trxFtApfgMyrpjYz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d92ef8a798f3ee1abeb0550e651f5096a12afedd21bb7a41585457f8eb3136e7
- Size
  
  313KB
- MD5
  
  8ca562a68dc066c9f105f273082cec58
- SHA1
  
  0e6692f4dce2cbd27f51cd54a78b7f85fb622f7c
- SHA256
  
  d92ef8a798f3ee1abeb0550e651f5096a12afedd21bb7a41585457f8eb3136e7
- SHA512
  
  b3c18a47dba6347d8fcaf70268e4f5cddcb99538343f7fc880f8b6f33982e6dc73c3c5213f3fc2335a2cee808eca29f9933aa25ebb51823a1b4872e7d5087e42
- SSDEEP
  
  6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYz:Ark4u6/eIo4nlu7trxFtApfgMyrpjYz
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2