861a9c75f90f0a99c42fba0cfd9c07af36c31a790be12dbe81b1f81a2b0bbc4a | Triage

Sharing

General

Target

861a9c75f90f0a99c42fba0cfd9c07af36c31a790be12dbe81b1f81a2b0bbc4a
Size

334KB
Sample

221123-j18efabg2t
MD5

a3a3f61ba8b0ea943b159ebf61afc951
SHA1

b301494cc6ab03afd54b3062f31507c9347bb70d
SHA256

861a9c75f90f0a99c42fba0cfd9c07af36c31a790be12dbe81b1f81a2b0bbc4a
SHA512

4041f5ae41583e3fbd3c37cb4dd98c32f64bdf53c458794775ad3ba5ded37eaefdf39fcc845a2c49cf4fe0c9a8898f2d87b5e9851b3ff3e266247cd5c4cb771d
SSDEEP

6144:5rv3cAbUzkuvcBYC47l2xDT2ktvFSNCOwe7KcN90pEWe6dGcsX74mzP3:5rv3c1kuveY3OT2ktvFSZw20pLnsjb3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  861a9c75f90f0a99c42fba0cfd9c07af36c31a790be12dbe81b1f81a2b0bbc4a
- Size
  
  334KB
- MD5
  
  a3a3f61ba8b0ea943b159ebf61afc951
- SHA1
  
  b301494cc6ab03afd54b3062f31507c9347bb70d
- SHA256
  
  861a9c75f90f0a99c42fba0cfd9c07af36c31a790be12dbe81b1f81a2b0bbc4a
- SHA512
  
  4041f5ae41583e3fbd3c37cb4dd98c32f64bdf53c458794775ad3ba5ded37eaefdf39fcc845a2c49cf4fe0c9a8898f2d87b5e9851b3ff3e266247cd5c4cb771d
- SSDEEP
  
  6144:5rv3cAbUzkuvcBYC47l2xDT2ktvFSNCOwe7KcN90pEWe6dGcsX74mzP3:5rv3c1kuveY3OT2ktvFSZw20pLnsjb3
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2