eea34c11d85f5e2c054fa406e11eb44ef8a3c8e8cee296074804430dd53e87cf | Triage

Sharing

General

Target

eea34c11d85f5e2c054fa406e11eb44ef8a3c8e8cee296074804430dd53e87cf
Size

313KB
Sample

221123-hw1ncsaa41
MD5

330df3b65d26b25dcf2726fa59d9f550
SHA1

f82c6deeacd4fb3c3221c6dc6fb9f29fa7d95552
SHA256

eea34c11d85f5e2c054fa406e11eb44ef8a3c8e8cee296074804430dd53e87cf
SHA512

c2cd79e7caec4d837c4612e0091b430763a2d330246cfc1d64c1dc1649291a2a9bf6e120636d194a73859107b7e5546f14a13e7403499afdb0d8b478267a083f
SSDEEP

6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lv:Hryu6/eIo4vMResyEf0uP9d9UG0v

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  eea34c11d85f5e2c054fa406e11eb44ef8a3c8e8cee296074804430dd53e87cf
- Size
  
  313KB
- MD5
  
  330df3b65d26b25dcf2726fa59d9f550
- SHA1
  
  f82c6deeacd4fb3c3221c6dc6fb9f29fa7d95552
- SHA256
  
  eea34c11d85f5e2c054fa406e11eb44ef8a3c8e8cee296074804430dd53e87cf
- SHA512
  
  c2cd79e7caec4d837c4612e0091b430763a2d330246cfc1d64c1dc1649291a2a9bf6e120636d194a73859107b7e5546f14a13e7403499afdb0d8b478267a083f
- SSDEEP
  
  6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lv:Hryu6/eIo4vMResyEf0uP9d9UG0v
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2