5e298afa9a15be6c95bf2c4c119dc872ea8b4486fd4a42aa6bf3b211d774e395 | Triage

Sharing

General

Target

5e298afa9a15be6c95bf2c4c119dc872ea8b4486fd4a42aa6bf3b211d774e395
Size

313KB
Sample

221123-j98fssgg28
MD5

f28e6cc462ba77eb75727cf13f42c154
SHA1

87c234332e8f0ef5932aa6dbb03081ed6c46606b
SHA256

5e298afa9a15be6c95bf2c4c119dc872ea8b4486fd4a42aa6bf3b211d774e395
SHA512

fbdef1200d1f426b1e8c33f3845347e0f38629e80397057389cd45b92cd527ce1ff6afc1fa9b606f58fc2fd77d58e18bf7c79bb6a94deab06692a3f501895c58
SSDEEP

6144:/rb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMa:/rRu6/eIo4t3PuFITKUAV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5e298afa9a15be6c95bf2c4c119dc872ea8b4486fd4a42aa6bf3b211d774e395
- Size
  
  313KB
- MD5
  
  f28e6cc462ba77eb75727cf13f42c154
- SHA1
  
  87c234332e8f0ef5932aa6dbb03081ed6c46606b
- SHA256
  
  5e298afa9a15be6c95bf2c4c119dc872ea8b4486fd4a42aa6bf3b211d774e395
- SHA512
  
  fbdef1200d1f426b1e8c33f3845347e0f38629e80397057389cd45b92cd527ce1ff6afc1fa9b606f58fc2fd77d58e18bf7c79bb6a94deab06692a3f501895c58
- SSDEEP
  
  6144:/rb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMa:/rRu6/eIo4t3PuFITKUAV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2