a5db9cd5e5a5a6555694c47228e0fd927cf770c3c392b3e1e874ec84a213f653 | Triage

Sharing

General

Target

a5db9cd5e5a5a6555694c47228e0fd927cf770c3c392b3e1e874ec84a213f653
Size

327KB
Sample

221123-jvbtaaga93
MD5

a68fd615993274cf02bb5b8c41e2603b
SHA1

a8c0debda704d40d9433534dbba40786d65e40e4
SHA256

a5db9cd5e5a5a6555694c47228e0fd927cf770c3c392b3e1e874ec84a213f653
SHA512

3d4272329e82116cb16d948474b6ca09b1aef2f184bad3497bb4096248d2a11c99a76c1c9ff6d6c90d10190745db9b7183403baea20ebf23f7a4766cc9ef1c6e
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fh:Rr4iu6/eIo4Rsw33AtsmQY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a5db9cd5e5a5a6555694c47228e0fd927cf770c3c392b3e1e874ec84a213f653
- Size
  
  327KB
- MD5
  
  a68fd615993274cf02bb5b8c41e2603b
- SHA1
  
  a8c0debda704d40d9433534dbba40786d65e40e4
- SHA256
  
  a5db9cd5e5a5a6555694c47228e0fd927cf770c3c392b3e1e874ec84a213f653
- SHA512
  
  3d4272329e82116cb16d948474b6ca09b1aef2f184bad3497bb4096248d2a11c99a76c1c9ff6d6c90d10190745db9b7183403baea20ebf23f7a4766cc9ef1c6e
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fh:Rr4iu6/eIo4Rsw33AtsmQY
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2