ef439dd7a20095e9d5a0fa0c4e36f2ca38df4280f0d26f5f2507e31aebe86949 | Triage

Sharing

General

Target

ef439dd7a20095e9d5a0fa0c4e36f2ca38df4280f0d26f5f2507e31aebe86949
Size

313KB
Sample

221123-hwsyhsaa4v
MD5

4a5f479ad178432b682b8cf610ec7939
SHA1

19e16916f9caccfdd79c56d54c244f70e8e822f8
SHA256

ef439dd7a20095e9d5a0fa0c4e36f2ca38df4280f0d26f5f2507e31aebe86949
SHA512

fab2baf07bdfee74830071c5fdb6ec48ac0aa58144197d616fbdab1d2dae72587d798ec2efe5fc7d99644ba3a6bb9bc82953e603a6f9ce9dee5ad7413289d8f1
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LP:3ryu6/eIo4vMResyEf0uP9d9UG0P

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ef439dd7a20095e9d5a0fa0c4e36f2ca38df4280f0d26f5f2507e31aebe86949
- Size
  
  313KB
- MD5
  
  4a5f479ad178432b682b8cf610ec7939
- SHA1
  
  19e16916f9caccfdd79c56d54c244f70e8e822f8
- SHA256
  
  ef439dd7a20095e9d5a0fa0c4e36f2ca38df4280f0d26f5f2507e31aebe86949
- SHA512
  
  fab2baf07bdfee74830071c5fdb6ec48ac0aa58144197d616fbdab1d2dae72587d798ec2efe5fc7d99644ba3a6bb9bc82953e603a6f9ce9dee5ad7413289d8f1
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LP:3ryu6/eIo4vMResyEf0uP9d9UG0P
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2