e903b806a132588d6b31b5ad0c20d8f3294b7991081613f7f0761eb89025dbdc | Triage

Sharing

General

Target

e903b806a132588d6b31b5ad0c20d8f3294b7991081613f7f0761eb89025dbdc
Size

313KB
Sample

221123-hy9ztaab31
MD5

39398f4baa5db35f7824eed4924be5a4
SHA1

8692fed3d353f1e68f2ae76f7e0aad8068ebc151
SHA256

e903b806a132588d6b31b5ad0c20d8f3294b7991081613f7f0761eb89025dbdc
SHA512

cafdd59bf2d10cc8cde075c80231b22c74cfc3c48cb4613f1a9c22100c921259ea1b8ab7e8c60de035ccf5161007254736aa9a6030656ee2189697548e4ab088
SSDEEP

6144:IrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDN:Irfu6/eIo4jVW5soVCcQovoO0DJM+EK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e903b806a132588d6b31b5ad0c20d8f3294b7991081613f7f0761eb89025dbdc
- Size
  
  313KB
- MD5
  
  39398f4baa5db35f7824eed4924be5a4
- SHA1
  
  8692fed3d353f1e68f2ae76f7e0aad8068ebc151
- SHA256
  
  e903b806a132588d6b31b5ad0c20d8f3294b7991081613f7f0761eb89025dbdc
- SHA512
  
  cafdd59bf2d10cc8cde075c80231b22c74cfc3c48cb4613f1a9c22100c921259ea1b8ab7e8c60de035ccf5161007254736aa9a6030656ee2189697548e4ab088
- SSDEEP
  
  6144:IrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDN:Irfu6/eIo4jVW5soVCcQovoO0DJM+EK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2