eff4525256735d9582f6c270bf8ab0195b8c0f9c04be599b445790246a7a2b8b | Triage

Sharing

General

Target

eff4525256735d9582f6c270bf8ab0195b8c0f9c04be599b445790246a7a2b8b
Size

313KB
Sample

221123-hwg61saa3w
MD5

70905b25c47a7a52c35e457d07193962
SHA1

e65805114861fa1460081a402796d2d3f85ade84
SHA256

eff4525256735d9582f6c270bf8ab0195b8c0f9c04be599b445790246a7a2b8b
SHA512

d5e8c633e259bb38e0fbd8259b303d28b86641235a3e79c8c84017dc1a781cba2abe2720a082b96d53439893b685c6a3f4fd239e648c98a2f7500ec566749bb6
SSDEEP

6144:Jrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM1:JrRu6/eIo4t3PuFITKUA+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  eff4525256735d9582f6c270bf8ab0195b8c0f9c04be599b445790246a7a2b8b
- Size
  
  313KB
- MD5
  
  70905b25c47a7a52c35e457d07193962
- SHA1
  
  e65805114861fa1460081a402796d2d3f85ade84
- SHA256
  
  eff4525256735d9582f6c270bf8ab0195b8c0f9c04be599b445790246a7a2b8b
- SHA512
  
  d5e8c633e259bb38e0fbd8259b303d28b86641235a3e79c8c84017dc1a781cba2abe2720a082b96d53439893b685c6a3f4fd239e648c98a2f7500ec566749bb6
- SSDEEP
  
  6144:Jrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM1:JrRu6/eIo4t3PuFITKUA+
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2