ecc8be32da8589a0987949ab8c8c8c5357669e35955350602c6767bdb1891e0d | Triage

Sharing

General

Target

ecc8be32da8589a0987949ab8c8c8c5357669e35955350602c6767bdb1891e0d
Size

312KB
Sample

221123-hxqvjsaa7w
MD5

cf4e374e81e9adf2501fc699a2353759
SHA1

354a78a9e9761fcd4d234bb9c84569c695ad34c7
SHA256

ecc8be32da8589a0987949ab8c8c8c5357669e35955350602c6767bdb1891e0d
SHA512

072d7aca7267379607525933b83600360a97d74a9a8ae5d6ef927ea14f15d9cf279cd464506797ddd79feb491b33e64a06817a9be65743fa913a80661960dcba
SSDEEP

6144:JrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iqd:Jrkau6/eIo43ts7KcXgXAN7iU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ecc8be32da8589a0987949ab8c8c8c5357669e35955350602c6767bdb1891e0d
- Size
  
  312KB
- MD5
  
  cf4e374e81e9adf2501fc699a2353759
- SHA1
  
  354a78a9e9761fcd4d234bb9c84569c695ad34c7
- SHA256
  
  ecc8be32da8589a0987949ab8c8c8c5357669e35955350602c6767bdb1891e0d
- SHA512
  
  072d7aca7267379607525933b83600360a97d74a9a8ae5d6ef927ea14f15d9cf279cd464506797ddd79feb491b33e64a06817a9be65743fa913a80661960dcba
- SSDEEP
  
  6144:JrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iqd:Jrkau6/eIo43ts7KcXgXAN7iU
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2