63e880704e322bdc1e455ba922167acf42846ef5c85391e8220170be71210639 | Triage

Sharing

General

Target

63e880704e322bdc1e455ba922167acf42846ef5c85391e8220170be71210639
Size

313KB
Sample

221123-j8xynsgf75
MD5

ba30518d06e0aab1bb933d5c7c8f9765
SHA1

6115bf5e32f7c9c8bb60cff0f25ef603c967ed2b
SHA256

63e880704e322bdc1e455ba922167acf42846ef5c85391e8220170be71210639
SHA512

d76abfc17c773fedfbb99c2d7e6a4fa48a5237345f9c16feac2c8231e6d941c363aa707c7d8ed2a4371cfb7705731eaad95a50460674db8b31153e7db6d2854d
SSDEEP

6144:Zrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMu:ZrRu6/eIo4t3PuFITKUAV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  63e880704e322bdc1e455ba922167acf42846ef5c85391e8220170be71210639
- Size
  
  313KB
- MD5
  
  ba30518d06e0aab1bb933d5c7c8f9765
- SHA1
  
  6115bf5e32f7c9c8bb60cff0f25ef603c967ed2b
- SHA256
  
  63e880704e322bdc1e455ba922167acf42846ef5c85391e8220170be71210639
- SHA512
  
  d76abfc17c773fedfbb99c2d7e6a4fa48a5237345f9c16feac2c8231e6d941c363aa707c7d8ed2a4371cfb7705731eaad95a50460674db8b31153e7db6d2854d
- SSDEEP
  
  6144:Zrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMu:ZrRu6/eIo4t3PuFITKUAV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2