d39f0dbe897e0874c95d94ef0685dcb4824b9db9b61db5fd8ff2d9c07100d4e4 | Triage

Sharing

General

Target

d39f0dbe897e0874c95d94ef0685dcb4824b9db9b61db5fd8ff2d9c07100d4e4
Size

313KB
Sample

221123-h9d2hsae7v
MD5

c9d89aa04c897f6f521e46d6af2c749b
SHA1

dc39901dce4ec445a9c0eb406d111633cbb322fc
SHA256

d39f0dbe897e0874c95d94ef0685dcb4824b9db9b61db5fd8ff2d9c07100d4e4
SHA512

dc3d7f06dbe05502861496e15a344ca1d417ed087f555560eadee39dc2a038067a53d68f84acf341f4c41fb277de50855225aecfcae422e29863537874db3cb3
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L2:3ryu6/eIo4vMResyEf0uP9d9UG02

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d39f0dbe897e0874c95d94ef0685dcb4824b9db9b61db5fd8ff2d9c07100d4e4
- Size
  
  313KB
- MD5
  
  c9d89aa04c897f6f521e46d6af2c749b
- SHA1
  
  dc39901dce4ec445a9c0eb406d111633cbb322fc
- SHA256
  
  d39f0dbe897e0874c95d94ef0685dcb4824b9db9b61db5fd8ff2d9c07100d4e4
- SHA512
  
  dc3d7f06dbe05502861496e15a344ca1d417ed087f555560eadee39dc2a038067a53d68f84acf341f4c41fb277de50855225aecfcae422e29863537874db3cb3
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L2:3ryu6/eIo4vMResyEf0uP9d9UG02
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2