d7ab7a70af859c7333e033f45b600f8c8b90f95e83b7783bc26de89aa8cd9633 | Triage

Sharing

General

Target

d7ab7a70af859c7333e033f45b600f8c8b90f95e83b7783bc26de89aa8cd9633
Size

327KB
Sample

221123-h7kfhsae2t
MD5

7d109282ee3a98fd8b756bf3b37d404a
SHA1

98cf12364791fc49ae901b23d750319f8b4767f3
SHA256

d7ab7a70af859c7333e033f45b600f8c8b90f95e83b7783bc26de89aa8cd9633
SHA512

a0b9f0f24803158d12dcde0465706cb6cb2b6ad25ac60c9b5a14c46b36cb777669aff39723d9025c95c02a1b42c20742c533aabba623bc72156cc266dc9220be
SSDEEP

6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FB:Br4iu6/eIo4Rsw33AtsmQQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d7ab7a70af859c7333e033f45b600f8c8b90f95e83b7783bc26de89aa8cd9633
- Size
  
  327KB
- MD5
  
  7d109282ee3a98fd8b756bf3b37d404a
- SHA1
  
  98cf12364791fc49ae901b23d750319f8b4767f3
- SHA256
  
  d7ab7a70af859c7333e033f45b600f8c8b90f95e83b7783bc26de89aa8cd9633
- SHA512
  
  a0b9f0f24803158d12dcde0465706cb6cb2b6ad25ac60c9b5a14c46b36cb777669aff39723d9025c95c02a1b42c20742c533aabba623bc72156cc266dc9220be
- SSDEEP
  
  6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FB:Br4iu6/eIo4Rsw33AtsmQQ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2