640bb7a9e623619607a5e6af7cbf80c571260ce38c03eff7045e4977d24bfa17 | Triage

Sharing

General

Target

640bb7a9e623619607a5e6af7cbf80c571260ce38c03eff7045e4977d24bfa17
Size

315KB
Sample

221123-j8wevagf73
MD5

e0098d19aaab898e7e974322c700da04
SHA1

31994c823946c2018618ecbf8f3db2e4bfcf7193
SHA256

640bb7a9e623619607a5e6af7cbf80c571260ce38c03eff7045e4977d24bfa17
SHA512

156a112eefd857358b7f9a463cdd2508d59a84cdeb6895bc372081ad3a0e3b05a11b60184cb57276d6c323c2b03e8c0428fe30295b9ba3f615ff1cfdf081b001
SSDEEP

6144:mrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5HS:mrdkuveY36kjZP/XKxlSZAHQS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  640bb7a9e623619607a5e6af7cbf80c571260ce38c03eff7045e4977d24bfa17
- Size
  
  315KB
- MD5
  
  e0098d19aaab898e7e974322c700da04
- SHA1
  
  31994c823946c2018618ecbf8f3db2e4bfcf7193
- SHA256
  
  640bb7a9e623619607a5e6af7cbf80c571260ce38c03eff7045e4977d24bfa17
- SHA512
  
  156a112eefd857358b7f9a463cdd2508d59a84cdeb6895bc372081ad3a0e3b05a11b60184cb57276d6c323c2b03e8c0428fe30295b9ba3f615ff1cfdf081b001
- SSDEEP
  
  6144:mrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5HS:mrdkuveY36kjZP/XKxlSZAHQS
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2