aa75bba09dec5a0371206ea04d1958c94d4ed56af4103e169851cd68d4fef81d | Triage

Sharing

General

Target

aa75bba09dec5a0371206ea04d1958c94d4ed56af4103e169851cd68d4fef81d
Size

327KB
Sample

221123-jtkpssga62
MD5

c14b275dca3b33ce3bf50a4155879256
SHA1

d3cf32ebb90f6048bfd0e55621618182600c3c4f
SHA256

aa75bba09dec5a0371206ea04d1958c94d4ed56af4103e169851cd68d4fef81d
SHA512

28c46cefaac9fd21744b16d429c6f1efde76f48d5941c48c904cb00960e430407432bdd623d1510c3e3b4fc5ff3833ef4310da37bc86e9ae6bb32a0e15d17944
SSDEEP

6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FF:pr4iu6/eIo4Rsw33AtsmQc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  aa75bba09dec5a0371206ea04d1958c94d4ed56af4103e169851cd68d4fef81d
- Size
  
  327KB
- MD5
  
  c14b275dca3b33ce3bf50a4155879256
- SHA1
  
  d3cf32ebb90f6048bfd0e55621618182600c3c4f
- SHA256
  
  aa75bba09dec5a0371206ea04d1958c94d4ed56af4103e169851cd68d4fef81d
- SHA512
  
  28c46cefaac9fd21744b16d429c6f1efde76f48d5941c48c904cb00960e430407432bdd623d1510c3e3b4fc5ff3833ef4310da37bc86e9ae6bb32a0e15d17944
- SSDEEP
  
  6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FF:pr4iu6/eIo4Rsw33AtsmQc
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2