9eb13f8113193f1cff5fcd3343d96cb48d1e997971952635dd7ddf43e946e614 | Triage

Sharing

General

Target

9eb13f8113193f1cff5fcd3343d96cb48d1e997971952635dd7ddf43e946e614
Size

313KB
Sample

221123-jwrwwsbe3y
MD5

d4b84edf4fdd8232b488d2f6fb8f52ef
SHA1

d1bbb4e8e80f1a869cc27d9bda205a0417d42730
SHA256

9eb13f8113193f1cff5fcd3343d96cb48d1e997971952635dd7ddf43e946e614
SHA512

86878989ff87e8888be5a32d4d0fe86ba114dbed2e9349fe79a7e58ec9c931d74000435d0c8ced9e510bdcb98a179eaef708105332f123edae8e2cbf2e8ccaf1
SSDEEP

6144:nrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L9:nryu6/eIo4vMResyEf0uP9d9UG09

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9eb13f8113193f1cff5fcd3343d96cb48d1e997971952635dd7ddf43e946e614
- Size
  
  313KB
- MD5
  
  d4b84edf4fdd8232b488d2f6fb8f52ef
- SHA1
  
  d1bbb4e8e80f1a869cc27d9bda205a0417d42730
- SHA256
  
  9eb13f8113193f1cff5fcd3343d96cb48d1e997971952635dd7ddf43e946e614
- SHA512
  
  86878989ff87e8888be5a32d4d0fe86ba114dbed2e9349fe79a7e58ec9c931d74000435d0c8ced9e510bdcb98a179eaef708105332f123edae8e2cbf2e8ccaf1
- SSDEEP
  
  6144:nrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L9:nryu6/eIo4vMResyEf0uP9d9UG09
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2