ef0f6661129130999a83eb0f17933bd73f4b4375abd40b19d3aef3bafcd38e0e | Triage

Sharing

General

Target

ef0f6661129130999a83eb0f17933bd73f4b4375abd40b19d3aef3bafcd38e0e
Size

326KB
Sample

221123-hwwdmsaa4x
MD5

47e7f021f35637ebf1a0233b93cebb3d
SHA1

b03cc0f634faaa9c5037112fbb6d27b412810c4a
SHA256

ef0f6661129130999a83eb0f17933bd73f4b4375abd40b19d3aef3bafcd38e0e
SHA512

7b1006f6a739b6b1298a05833002cdb7bc4c4f6da20e3ca6f220a78e911a7f126893e16d061c8fb442a5d567961f7d4dbcc2c14b9f5a898ea966b335bc1c3708
SSDEEP

6144:yr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgZ:yr4gu6/eIo4nULZKMRwxuPfk6B

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ef0f6661129130999a83eb0f17933bd73f4b4375abd40b19d3aef3bafcd38e0e
- Size
  
  326KB
- MD5
  
  47e7f021f35637ebf1a0233b93cebb3d
- SHA1
  
  b03cc0f634faaa9c5037112fbb6d27b412810c4a
- SHA256
  
  ef0f6661129130999a83eb0f17933bd73f4b4375abd40b19d3aef3bafcd38e0e
- SHA512
  
  7b1006f6a739b6b1298a05833002cdb7bc4c4f6da20e3ca6f220a78e911a7f126893e16d061c8fb442a5d567961f7d4dbcc2c14b9f5a898ea966b335bc1c3708
- SSDEEP
  
  6144:yr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgZ:yr4gu6/eIo4nULZKMRwxuPfk6B
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2