c87dd6013a8f65e452b871dd32dc36ec74d063406816259bc478bbd0780c58a4 | Triage

Sharing

General

Target

c87dd6013a8f65e452b871dd32dc36ec74d063406816259bc478bbd0780c58a4
Size

313KB
Sample

221123-jeaw2sag61
MD5

5b336476ca3f8228b8358c6e47226544
SHA1

3fc99bf539a1de060465ae464809b5595f574eae
SHA256

c87dd6013a8f65e452b871dd32dc36ec74d063406816259bc478bbd0780c58a4
SHA512

cae128bb1e3aecbcc394a16b8a0286124a7ad164813ab78679e6ef6326c045da78ef1c6a578af7f78a3f0e8651c5c3dc0f87516b3f559ea99364b454bd51c151
SSDEEP

6144:YrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijY0:Yrk4u6/eIo4nlu7trxFtApfgMyrpjY0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c87dd6013a8f65e452b871dd32dc36ec74d063406816259bc478bbd0780c58a4
- Size
  
  313KB
- MD5
  
  5b336476ca3f8228b8358c6e47226544
- SHA1
  
  3fc99bf539a1de060465ae464809b5595f574eae
- SHA256
  
  c87dd6013a8f65e452b871dd32dc36ec74d063406816259bc478bbd0780c58a4
- SHA512
  
  cae128bb1e3aecbcc394a16b8a0286124a7ad164813ab78679e6ef6326c045da78ef1c6a578af7f78a3f0e8651c5c3dc0f87516b3f559ea99364b454bd51c151
- SSDEEP
  
  6144:YrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijY0:Yrk4u6/eIo4nlu7trxFtApfgMyrpjY0
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2