6a2e877538784f1803153c65d667f84fcd78792f99f70e0ab4233b4141b3f7c6 | Triage

Sharing

General

Target

6a2e877538784f1803153c65d667f84fcd78792f99f70e0ab4233b4141b3f7c6
Size

325KB
Sample

221123-j7qg7sgf39
MD5

b223cb315c515bf5d772100e4bbecd79
SHA1

4472fae14c3932b358db7b623811e9345096bed4
SHA256

6a2e877538784f1803153c65d667f84fcd78792f99f70e0ab4233b4141b3f7c6
SHA512

3bfd16f6d73e4408c77de5dba6d2fd5831eed93e0bf92d47efeb30343b660305ff065611d0c9f88799c1c551cbeb30e2ee6aa57be33b3b73958faf51453f2aef
SSDEEP

6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o7:kr1B3u6/eIo4ArVUBQCCYOqmO5o7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6a2e877538784f1803153c65d667f84fcd78792f99f70e0ab4233b4141b3f7c6
- Size
  
  325KB
- MD5
  
  b223cb315c515bf5d772100e4bbecd79
- SHA1
  
  4472fae14c3932b358db7b623811e9345096bed4
- SHA256
  
  6a2e877538784f1803153c65d667f84fcd78792f99f70e0ab4233b4141b3f7c6
- SHA512
  
  3bfd16f6d73e4408c77de5dba6d2fd5831eed93e0bf92d47efeb30343b660305ff065611d0c9f88799c1c551cbeb30e2ee6aa57be33b3b73958faf51453f2aef
- SSDEEP
  
  6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o7:kr1B3u6/eIo4ArVUBQCCYOqmO5o7
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2