677cb9a795fa30f08222fe1da523f239e1ee68c0c8a6181c4f61b1c1fb330708 | Triage

Sharing

General

Target

677cb9a795fa30f08222fe1da523f239e1ee68c0c8a6181c4f61b1c1fb330708
Size

327KB
Sample

221123-j8as5sca6t
MD5

9afca3bf87f3d79b6204bb150f8748f6
SHA1

73ddadf6df65e3a3344de9e82d2a6fb225201e49
SHA256

677cb9a795fa30f08222fe1da523f239e1ee68c0c8a6181c4f61b1c1fb330708
SHA512

63e34ae3e18c5488fb1faa2a3dec28c83b3ad4dbd6eda8dd7f538e6408f29c2c70a3487109b2c71c7454a7c85626271fc3e4bd01d06d215fa62fc4db7a61e1d2
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F6:Zr4iu6/eIo4Rsw33AtsmQz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  677cb9a795fa30f08222fe1da523f239e1ee68c0c8a6181c4f61b1c1fb330708
- Size
  
  327KB
- MD5
  
  9afca3bf87f3d79b6204bb150f8748f6
- SHA1
  
  73ddadf6df65e3a3344de9e82d2a6fb225201e49
- SHA256
  
  677cb9a795fa30f08222fe1da523f239e1ee68c0c8a6181c4f61b1c1fb330708
- SHA512
  
  63e34ae3e18c5488fb1faa2a3dec28c83b3ad4dbd6eda8dd7f538e6408f29c2c70a3487109b2c71c7454a7c85626271fc3e4bd01d06d215fa62fc4db7a61e1d2
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F6:Zr4iu6/eIo4Rsw33AtsmQz
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2