a4bbb2525279e02531674b00fd3ebdad90d018b4d978ba2cb35cf338127bc5d0 | Triage

Sharing

General

Target

a4bbb2525279e02531674b00fd3ebdad90d018b4d978ba2cb35cf338127bc5d0
Size

314KB
Sample

221123-jvn4lsbd8t
MD5

e0a78d19fe1915a6108493d5d89ecbfd
SHA1

185d09fe68139c6bf89a2011ef9fdfcbe6ecd004
SHA256

a4bbb2525279e02531674b00fd3ebdad90d018b4d978ba2cb35cf338127bc5d0
SHA512

30270062823f679b3ae5fb0f24bdc85fdaba6999f0b89e3e7326913fae17b62bfaf912d3d94ed3e52398affa98453b32e21f6571e9270e9deb6049a005f78789
SSDEEP

6144:ArAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwi:Ar1kuveY35YO67Wxz7wi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a4bbb2525279e02531674b00fd3ebdad90d018b4d978ba2cb35cf338127bc5d0
- Size
  
  314KB
- MD5
  
  e0a78d19fe1915a6108493d5d89ecbfd
- SHA1
  
  185d09fe68139c6bf89a2011ef9fdfcbe6ecd004
- SHA256
  
  a4bbb2525279e02531674b00fd3ebdad90d018b4d978ba2cb35cf338127bc5d0
- SHA512
  
  30270062823f679b3ae5fb0f24bdc85fdaba6999f0b89e3e7326913fae17b62bfaf912d3d94ed3e52398affa98453b32e21f6571e9270e9deb6049a005f78789
- SSDEEP
  
  6144:ArAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwi:Ar1kuveY35YO67Wxz7wi
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2