ec558bb7d4f82daf9bba10bf5a24b4aa438a0fc05a5eea77ced1b44bc87e2c0d | Triage

Sharing

General

Target

ec558bb7d4f82daf9bba10bf5a24b4aa438a0fc05a5eea77ced1b44bc87e2c0d
Size

313KB
Sample

221123-hx1dzsaa8w
MD5

75da464f04b48d98e209d29994ac60a0
SHA1

589d5ee79254eedc884c050ad02b4b0fd19c757a
SHA256

ec558bb7d4f82daf9bba10bf5a24b4aa438a0fc05a5eea77ced1b44bc87e2c0d
SHA512

1ac6db322cc71c70b9794c205bb28da3ed7652c60686a0d6ac8328b56cee4e9c274785a749468b149d93a9b29efe81d11f6858394847281cfa97d6ee2f4fcaee
SSDEEP

6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L8:Xryu6/eIo4vMResyEf0uP9d9UG08

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ec558bb7d4f82daf9bba10bf5a24b4aa438a0fc05a5eea77ced1b44bc87e2c0d
- Size
  
  313KB
- MD5
  
  75da464f04b48d98e209d29994ac60a0
- SHA1
  
  589d5ee79254eedc884c050ad02b4b0fd19c757a
- SHA256
  
  ec558bb7d4f82daf9bba10bf5a24b4aa438a0fc05a5eea77ced1b44bc87e2c0d
- SHA512
  
  1ac6db322cc71c70b9794c205bb28da3ed7652c60686a0d6ac8328b56cee4e9c274785a749468b149d93a9b29efe81d11f6858394847281cfa97d6ee2f4fcaee
- SSDEEP
  
  6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L8:Xryu6/eIo4vMResyEf0uP9d9UG08
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2