e9c9989dae40fca7fdf467af6ffd2bc2f1b03a0d9f9c4410692750279afc5b97 | Triage

Sharing

General

Target

e9c9989dae40fca7fdf467af6ffd2bc2f1b03a0d9f9c4410692750279afc5b97
Size

314KB
Sample

221123-hyxpgsef49
MD5

c3506b6410883ca540bac78fffe07b8f
SHA1

e2f4feac8a0838c47e5eec10ae048952e04ba29f
SHA256

e9c9989dae40fca7fdf467af6ffd2bc2f1b03a0d9f9c4410692750279afc5b97
SHA512

3f9b0220096e2bf0a3f1fe72122036e0acd9637bd9d9f35e712fc93f51deca5721ea4d3b2660034864af29196f9949c5105f8f7e4a5e248a8c25ccdc488f1efc
SSDEEP

6144:Tr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtV:TrqkuveY3RnV6c800oIpbv0SVtV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e9c9989dae40fca7fdf467af6ffd2bc2f1b03a0d9f9c4410692750279afc5b97
- Size
  
  314KB
- MD5
  
  c3506b6410883ca540bac78fffe07b8f
- SHA1
  
  e2f4feac8a0838c47e5eec10ae048952e04ba29f
- SHA256
  
  e9c9989dae40fca7fdf467af6ffd2bc2f1b03a0d9f9c4410692750279afc5b97
- SHA512
  
  3f9b0220096e2bf0a3f1fe72122036e0acd9637bd9d9f35e712fc93f51deca5721ea4d3b2660034864af29196f9949c5105f8f7e4a5e248a8c25ccdc488f1efc
- SSDEEP
  
  6144:Tr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtV:TrqkuveY3RnV6c800oIpbv0SVtV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2