2eca54e0d6cbc248331ec036984ecf45580708122cf7723b984f64e40760f2d4 | Triage

Sharing

General

Target

2eca54e0d6cbc248331ec036984ecf45580708122cf7723b984f64e40760f2d4
Size

314KB
Sample

221123-kh3lxace5v
MD5

d8cec956a4657883c399da96290b6b1d
SHA1

5fe15cec1d756141f743f9dae8b13fdc109ad77f
SHA256

2eca54e0d6cbc248331ec036984ecf45580708122cf7723b984f64e40760f2d4
SHA512

c3f3a9c5f9d85e9cb7e884db1233b7389e3671426e3f43d7662b408df27dfdfc0aff6615d0dbb13507a47547dc4b1f937bf470e5c5611b152133aedf612c0a45
SSDEEP

6144:wrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw2:wr1kuveY35YO67Wxz7w2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2eca54e0d6cbc248331ec036984ecf45580708122cf7723b984f64e40760f2d4
- Size
  
  314KB
- MD5
  
  d8cec956a4657883c399da96290b6b1d
- SHA1
  
  5fe15cec1d756141f743f9dae8b13fdc109ad77f
- SHA256
  
  2eca54e0d6cbc248331ec036984ecf45580708122cf7723b984f64e40760f2d4
- SHA512
  
  c3f3a9c5f9d85e9cb7e884db1233b7389e3671426e3f43d7662b408df27dfdfc0aff6615d0dbb13507a47547dc4b1f937bf470e5c5611b152133aedf612c0a45
- SSDEEP
  
  6144:wrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw2:wr1kuveY35YO67Wxz7w2
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2