e8cb0e296065534bc13cfa781d2fd0b5e660472805c9303ce2f8c97d0400ef01 | Triage

Sharing

General

Target

e8cb0e296065534bc13cfa781d2fd0b5e660472805c9303ce2f8c97d0400ef01
Size

313KB
Sample

221123-hzdb8sab4v
MD5

d15dce829dbc58f68d224ca73289dfb2
SHA1

fb3d424544d39a10c73e807fa321d0d195f9e272
SHA256

e8cb0e296065534bc13cfa781d2fd0b5e660472805c9303ce2f8c97d0400ef01
SHA512

2a9a94550ce80f1283420279463be47042b01af520fe8898ba1878211f358ff7931d6325a0f35cadae709b730ba6f16603511e1705bfa473978f0bcc94aa2320
SSDEEP

6144:vrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L5:vryu6/eIo4vMResyEf0uP9d9UG05

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e8cb0e296065534bc13cfa781d2fd0b5e660472805c9303ce2f8c97d0400ef01
- Size
  
  313KB
- MD5
  
  d15dce829dbc58f68d224ca73289dfb2
- SHA1
  
  fb3d424544d39a10c73e807fa321d0d195f9e272
- SHA256
  
  e8cb0e296065534bc13cfa781d2fd0b5e660472805c9303ce2f8c97d0400ef01
- SHA512
  
  2a9a94550ce80f1283420279463be47042b01af520fe8898ba1878211f358ff7931d6325a0f35cadae709b730ba6f16603511e1705bfa473978f0bcc94aa2320
- SSDEEP
  
  6144:vrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L5:vryu6/eIo4vMResyEf0uP9d9UG05
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2