d8a2b7fbcfb95de19ef8b28e8210275df49a271b1f78ad566051913ce41f3afa | Triage

Sharing

General

Target

d8a2b7fbcfb95de19ef8b28e8210275df49a271b1f78ad566051913ce41f3afa
Size

325KB
Sample

221123-h668wsfa49
MD5

06e9bf0160f260f530b090cce8d94f17
SHA1

a34d75f59756e3c13cf7cd1a6f01a0ca392194b9
SHA256

d8a2b7fbcfb95de19ef8b28e8210275df49a271b1f78ad566051913ce41f3afa
SHA512

1ba547845ae103e9462bceb3b0087dc8ffcd8fd4ee7ed5a32fd790970315d3beecf88c7f14e9bf8523eb6d1243a4e7ddd60d39d48eb3a4e54263dbf32e4de94f
SSDEEP

6144:Er1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oPU:Er1B3u6/eIo4ArVUBQCCYOqmO5o8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d8a2b7fbcfb95de19ef8b28e8210275df49a271b1f78ad566051913ce41f3afa
- Size
  
  325KB
- MD5
  
  06e9bf0160f260f530b090cce8d94f17
- SHA1
  
  a34d75f59756e3c13cf7cd1a6f01a0ca392194b9
- SHA256
  
  d8a2b7fbcfb95de19ef8b28e8210275df49a271b1f78ad566051913ce41f3afa
- SHA512
  
  1ba547845ae103e9462bceb3b0087dc8ffcd8fd4ee7ed5a32fd790970315d3beecf88c7f14e9bf8523eb6d1243a4e7ddd60d39d48eb3a4e54263dbf32e4de94f
- SSDEEP
  
  6144:Er1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oPU:Er1B3u6/eIo4ArVUBQCCYOqmO5o8
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2