ed3a41eaf8a728329b96df65fe13542b449a45e822276744a1b4783b86522ab4 | Triage

Sharing

General

Target

ed3a41eaf8a728329b96df65fe13542b449a45e822276744a1b4783b86522ab4
Size

313KB
Sample

221123-hxknjaee79
MD5

7863b261bdc7cfb8584ee1ef25b5b1f2
SHA1

a8305458048ec4c4a5e6e83143f1f64357517069
SHA256

ed3a41eaf8a728329b96df65fe13542b449a45e822276744a1b4783b86522ab4
SHA512

5b31e5cff0e848d85cd93b808fc4f68d6cae0bfa531b572d89926672b731512226593e1b1bf23f120407beb05492583ee24a54eb085f06af3269705dea7a7670
SSDEEP

6144:wrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYI:wrk4u6/eIo4nlu7trxFtApfgMyrpjYI

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ed3a41eaf8a728329b96df65fe13542b449a45e822276744a1b4783b86522ab4
- Size
  
  313KB
- MD5
  
  7863b261bdc7cfb8584ee1ef25b5b1f2
- SHA1
  
  a8305458048ec4c4a5e6e83143f1f64357517069
- SHA256
  
  ed3a41eaf8a728329b96df65fe13542b449a45e822276744a1b4783b86522ab4
- SHA512
  
  5b31e5cff0e848d85cd93b808fc4f68d6cae0bfa531b572d89926672b731512226593e1b1bf23f120407beb05492583ee24a54eb085f06af3269705dea7a7670
- SSDEEP
  
  6144:wrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYI:wrk4u6/eIo4nlu7trxFtApfgMyrpjYI
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2