4a0da4a5e435c3bb9804406181d5b16237824ae93f19fb5e320acf10145e67d7 | Triage

Sharing

General

Target

4a0da4a5e435c3bb9804406181d5b16237824ae93f19fb5e320acf10145e67d7
Size

316KB
Sample

221123-kdnl7agh67
MD5

e250bd61acd5e0cf08a706f39846e63b
SHA1

1d7091efe34fb9c86aefff7e7530f064bec5f86c
SHA256

4a0da4a5e435c3bb9804406181d5b16237824ae93f19fb5e320acf10145e67d7
SHA512

b67265c6f2fca3961fbe69632252852ccfa1795f5659dfe18eb8464c377da1dbe9ed067abad07649ebb836e139d867746d11898e43b8d932d0ca976a71393e93
SSDEEP

6144:6rabUzkuvcBYC47l2xgh2hyP9wUnIG2mQP6vxoG0rkKE:6rDkuveY3N2eHnIPmQP6vqv8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4a0da4a5e435c3bb9804406181d5b16237824ae93f19fb5e320acf10145e67d7
- Size
  
  316KB
- MD5
  
  e250bd61acd5e0cf08a706f39846e63b
- SHA1
  
  1d7091efe34fb9c86aefff7e7530f064bec5f86c
- SHA256
  
  4a0da4a5e435c3bb9804406181d5b16237824ae93f19fb5e320acf10145e67d7
- SHA512
  
  b67265c6f2fca3961fbe69632252852ccfa1795f5659dfe18eb8464c377da1dbe9ed067abad07649ebb836e139d867746d11898e43b8d932d0ca976a71393e93
- SSDEEP
  
  6144:6rabUzkuvcBYC47l2xgh2hyP9wUnIG2mQP6vxoG0rkKE:6rDkuveY3N2eHnIPmQP6vqv8
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2