70dd9ae397e77a656a93a6d67a3fe2e432864475d6354461166ea4cdb76d7fa4 | Triage

Sharing

General

Target

70dd9ae397e77a656a93a6d67a3fe2e432864475d6354461166ea4cdb76d7fa4
Size

324KB
Sample

221123-j6byesbh8s
MD5

e2308d115e34f8f2f5c021b35712c03d
SHA1

b057ea596993610176662e23c3807fa98f99fdfa
SHA256

70dd9ae397e77a656a93a6d67a3fe2e432864475d6354461166ea4cdb76d7fa4
SHA512

558d72fb82389bd5f37522b4681e58f4b525e97e6fa5586351c469afaa225c44964cb4bd912b290269db8f300cbd615532761c54b4186131c6731ee7b3f69f1c
SSDEEP

6144:0rORTyv4bo0jy7bXbUzkuvcBYC47l2xerm4Jk4GJB5fbcMdAoIF8jri4:0rV8kuveY3Rm4JTgfQqBIerV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  70dd9ae397e77a656a93a6d67a3fe2e432864475d6354461166ea4cdb76d7fa4
- Size
  
  324KB
- MD5
  
  e2308d115e34f8f2f5c021b35712c03d
- SHA1
  
  b057ea596993610176662e23c3807fa98f99fdfa
- SHA256
  
  70dd9ae397e77a656a93a6d67a3fe2e432864475d6354461166ea4cdb76d7fa4
- SHA512
  
  558d72fb82389bd5f37522b4681e58f4b525e97e6fa5586351c469afaa225c44964cb4bd912b290269db8f300cbd615532761c54b4186131c6731ee7b3f69f1c
- SSDEEP
  
  6144:0rORTyv4bo0jy7bXbUzkuvcBYC47l2xerm4Jk4GJB5fbcMdAoIF8jri4:0rV8kuveY3Rm4JTgfQqBIerV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2