ec886efd6b0623542dc2a1a16a6978fc67446dd6489aa9514a4dc6c85a5a43de | Triage

Sharing

General

Target

ec886efd6b0623542dc2a1a16a6978fc67446dd6489aa9514a4dc6c85a5a43de
Size

327KB
Sample

221123-hxtlfaaa7z
MD5

e9a0300bfefc31300a794d7b4994124f
SHA1

93af19121fc4a79529cf6e1903e07bc493cd66cf
SHA256

ec886efd6b0623542dc2a1a16a6978fc67446dd6489aa9514a4dc6c85a5a43de
SHA512

6e69c16da88510c3fff7ee2a4094688111cefcb57a00770a836940b19b79020672fdcff1ab61a0583b0597468f9ea6ee42e842a8d74cd613303dcf52752d4da9
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fx:Zr4iu6/eIo4Rsw33AtsmQI

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ec886efd6b0623542dc2a1a16a6978fc67446dd6489aa9514a4dc6c85a5a43de
- Size
  
  327KB
- MD5
  
  e9a0300bfefc31300a794d7b4994124f
- SHA1
  
  93af19121fc4a79529cf6e1903e07bc493cd66cf
- SHA256
  
  ec886efd6b0623542dc2a1a16a6978fc67446dd6489aa9514a4dc6c85a5a43de
- SHA512
  
  6e69c16da88510c3fff7ee2a4094688111cefcb57a00770a836940b19b79020672fdcff1ab61a0583b0597468f9ea6ee42e842a8d74cd613303dcf52752d4da9
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fx:Zr4iu6/eIo4Rsw33AtsmQI
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2