a83ceba88a4463c05f1dd9332acbc7f7469117193110465f367d359a50264e3e | Triage

Sharing

General

Target

a83ceba88a4463c05f1dd9332acbc7f7469117193110465f367d359a50264e3e
Size

327KB
Sample

221123-jtyawsga77
MD5

d3f90a54d1e1838e858681fa738d4d50
SHA1

70ceb6cbc5c93f1c3902a1810821ec300cf5dea3
SHA256

a83ceba88a4463c05f1dd9332acbc7f7469117193110465f367d359a50264e3e
SHA512

2b1a5cd0b2b9266a34cd9a8da0c17541ab7bae3338fe0e7a38a72ade23fa7bd4890fd6bfdbfe0f40a80a4f4254c49901e40239ff3b7dcd573ead97d2c1a50e10
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FW:Zr4iu6/eIo4Rsw33AtsmQT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a83ceba88a4463c05f1dd9332acbc7f7469117193110465f367d359a50264e3e
- Size
  
  327KB
- MD5
  
  d3f90a54d1e1838e858681fa738d4d50
- SHA1
  
  70ceb6cbc5c93f1c3902a1810821ec300cf5dea3
- SHA256
  
  a83ceba88a4463c05f1dd9332acbc7f7469117193110465f367d359a50264e3e
- SHA512
  
  2b1a5cd0b2b9266a34cd9a8da0c17541ab7bae3338fe0e7a38a72ade23fa7bd4890fd6bfdbfe0f40a80a4f4254c49901e40239ff3b7dcd573ead97d2c1a50e10
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FW:Zr4iu6/eIo4Rsw33AtsmQT
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2