9c9d7da24dfdd8914cf33f3abdb37667ac21352c72942da071876c38ee85ec7f | Triage

Sharing

General

Target

9c9d7da24dfdd8914cf33f3abdb37667ac21352c72942da071876c38ee85ec7f
Size

327KB
Sample

221123-jw8jmsgb67
MD5

f678039dd15694dfabb75ff3c91928a8
SHA1

d524822d2a594d2812129e0cfe302ecf0d989f39
SHA256

9c9d7da24dfdd8914cf33f3abdb37667ac21352c72942da071876c38ee85ec7f
SHA512

351c9369134b39aad6b2ded63bda928b53bcea1b62305e2f28b370613e5a3ab33e4b45d966f517f21612a39f90e5e82a6925170a61599b01be03e7086193d03c
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F3D:Rr4iu6/eIo4Rsw33AtsmQ2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9c9d7da24dfdd8914cf33f3abdb37667ac21352c72942da071876c38ee85ec7f
- Size
  
  327KB
- MD5
  
  f678039dd15694dfabb75ff3c91928a8
- SHA1
  
  d524822d2a594d2812129e0cfe302ecf0d989f39
- SHA256
  
  9c9d7da24dfdd8914cf33f3abdb37667ac21352c72942da071876c38ee85ec7f
- SHA512
  
  351c9369134b39aad6b2ded63bda928b53bcea1b62305e2f28b370613e5a3ab33e4b45d966f517f21612a39f90e5e82a6925170a61599b01be03e7086193d03c
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F3D:Rr4iu6/eIo4Rsw33AtsmQ2
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2