9a1c1befc04a01ec94593d5f8c128c789694eb1b0eb1077c044878ed419455cf | Triage

Sharing

General

Target

9a1c1befc04a01ec94593d5f8c128c789694eb1b0eb1077c044878ed419455cf
Size

315KB
Sample

221123-jxnwmagb87
MD5

e97f13671300b467c9979eb9c6eeb996
SHA1

9722866af5450ec2d4cc87c4a31a2d6b7f495671
SHA256

9a1c1befc04a01ec94593d5f8c128c789694eb1b0eb1077c044878ed419455cf
SHA512

9db5c736e951e0c2f4ef27c1e2c1c0c0909dfabc8bc85040bc01886acd4844c8a46bc86760344d2c9cc08e6a8b985b7c34527742bd970dd86152dd861c6f0f2c
SSDEEP

6144:OrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5X:OrdkuveY36kjZP/XKxlSZAHO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9a1c1befc04a01ec94593d5f8c128c789694eb1b0eb1077c044878ed419455cf
- Size
  
  315KB
- MD5
  
  e97f13671300b467c9979eb9c6eeb996
- SHA1
  
  9722866af5450ec2d4cc87c4a31a2d6b7f495671
- SHA256
  
  9a1c1befc04a01ec94593d5f8c128c789694eb1b0eb1077c044878ed419455cf
- SHA512
  
  9db5c736e951e0c2f4ef27c1e2c1c0c0909dfabc8bc85040bc01886acd4844c8a46bc86760344d2c9cc08e6a8b985b7c34527742bd970dd86152dd861c6f0f2c
- SSDEEP
  
  6144:OrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5X:OrdkuveY36kjZP/XKxlSZAHO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2