8249f7cc9fa469562122127dbe4d79e34944209fe5fa45e4c466d5ffcc6f17e4 | Triage

Sharing

General

Target

8249f7cc9fa469562122127dbe4d79e34944209fe5fa45e4c466d5ffcc6f17e4
Size

327KB
Sample

221123-j2yxdsbg4y
MD5

ccb856145d437f6462df9bca7e036041
SHA1

5d8c544a7c62ce192efb94d001415eda733b3ff9
SHA256

8249f7cc9fa469562122127dbe4d79e34944209fe5fa45e4c466d5ffcc6f17e4
SHA512

e9dec33ac384850dc24010e4fc10b472fbeec467b44936752f838cda6574f2ca171a20a9969e45a9246e4d1f24a56fd77723c3f2451a6eeec8b9d8226aa4daf4
SSDEEP

6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FZFv:xr4iu6/eIo4Rsw33AtsmQAFv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8249f7cc9fa469562122127dbe4d79e34944209fe5fa45e4c466d5ffcc6f17e4
- Size
  
  327KB
- MD5
  
  ccb856145d437f6462df9bca7e036041
- SHA1
  
  5d8c544a7c62ce192efb94d001415eda733b3ff9
- SHA256
  
  8249f7cc9fa469562122127dbe4d79e34944209fe5fa45e4c466d5ffcc6f17e4
- SHA512
  
  e9dec33ac384850dc24010e4fc10b472fbeec467b44936752f838cda6574f2ca171a20a9969e45a9246e4d1f24a56fd77723c3f2451a6eeec8b9d8226aa4daf4
- SSDEEP
  
  6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FZFv:xr4iu6/eIo4Rsw33AtsmQAFv
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2