ed56f7d857f05af8206ef9b8dea68de8e8c1aa209528ae7f5a48ac373bbad41f | Triage

Sharing

General

Target

ed56f7d857f05af8206ef9b8dea68de8e8c1aa209528ae7f5a48ac373bbad41f
Size

327KB
Sample

221123-hxh5psaa6z
MD5

640e3416b8005ab2e36c336d80a4af8d
SHA1

01d5cbcffe603c2a535529d1cbd0ea2332d5c42f
SHA256

ed56f7d857f05af8206ef9b8dea68de8e8c1aa209528ae7f5a48ac373bbad41f
SHA512

935ce36edf76e42fedf63ab2672adc9389f42faefdb305b767f3c80dcea58a920603911057d85f4c4e00ec89c0c9701122e0f0cd18d40153047737403273d905
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fw:Rr4iu6/eIo4Rsw33AtsmQV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ed56f7d857f05af8206ef9b8dea68de8e8c1aa209528ae7f5a48ac373bbad41f
- Size
  
  327KB
- MD5
  
  640e3416b8005ab2e36c336d80a4af8d
- SHA1
  
  01d5cbcffe603c2a535529d1cbd0ea2332d5c42f
- SHA256
  
  ed56f7d857f05af8206ef9b8dea68de8e8c1aa209528ae7f5a48ac373bbad41f
- SHA512
  
  935ce36edf76e42fedf63ab2672adc9389f42faefdb305b767f3c80dcea58a920603911057d85f4c4e00ec89c0c9701122e0f0cd18d40153047737403273d905
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fw:Rr4iu6/eIo4Rsw33AtsmQV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2