dad48d79e8adfd09098dc33d6dea6b0f425c48c9ecee1114d46c00c782687947 | Triage

Sharing

General

Target

dad48d79e8adfd09098dc33d6dea6b0f425c48c9ecee1114d46c00c782687947
Size

316KB
Sample

221123-h6b3raad6v
MD5

b186a9dfc94041e257dfe941adadcfc4
SHA1

9d1313887fc578ac1018159100f8362a2e9b1d8f
SHA256

dad48d79e8adfd09098dc33d6dea6b0f425c48c9ecee1114d46c00c782687947
SHA512

946b94e1e2c78f301657e1a6f9ab2f12bac1164742e42dbf3b36a803245c93bf6f0cf1e713baf0203e7d08310e829c0ac2f8c8ac3dbfae2651f395fa13f65d77
SSDEEP

6144:br/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYe1W:br0kuveY3cY1cia66MGd0Vs9BdNk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dad48d79e8adfd09098dc33d6dea6b0f425c48c9ecee1114d46c00c782687947
- Size
  
  316KB
- MD5
  
  b186a9dfc94041e257dfe941adadcfc4
- SHA1
  
  9d1313887fc578ac1018159100f8362a2e9b1d8f
- SHA256
  
  dad48d79e8adfd09098dc33d6dea6b0f425c48c9ecee1114d46c00c782687947
- SHA512
  
  946b94e1e2c78f301657e1a6f9ab2f12bac1164742e42dbf3b36a803245c93bf6f0cf1e713baf0203e7d08310e829c0ac2f8c8ac3dbfae2651f395fa13f65d77
- SSDEEP
  
  6144:br/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYe1W:br0kuveY3cY1cia66MGd0Vs9BdNk
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2