2de424ca3b7ab02fb43a3162f43a8a5d31c2083cf3cc84225c0383a5afdd3f28 | Triage

Sharing

General

Target

2de424ca3b7ab02fb43a3162f43a8a5d31c2083cf3cc84225c0383a5afdd3f28
Size

313KB
Sample

221123-kh9p8ace51
MD5

d14f76c3684270deb98eb5c906778890
SHA1

dd858df204e92916e183ae6fac04c6852a51ce6f
SHA256

2de424ca3b7ab02fb43a3162f43a8a5d31c2083cf3cc84225c0383a5afdd3f28
SHA512

f203b80af2e62c75815e1aa05b7480d72a3aa2a06d06114c5d7b718db66cc3fcaccfffd17d70848b69abea73f756da89364e3b76bbcfd48c31473f5dd032d67f
SSDEEP

6144:YrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYZg:Yrk4u6/eIo4nlu7trxFtApfgMyrpjYZg

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2de424ca3b7ab02fb43a3162f43a8a5d31c2083cf3cc84225c0383a5afdd3f28
- Size
  
  313KB
- MD5
  
  d14f76c3684270deb98eb5c906778890
- SHA1
  
  dd858df204e92916e183ae6fac04c6852a51ce6f
- SHA256
  
  2de424ca3b7ab02fb43a3162f43a8a5d31c2083cf3cc84225c0383a5afdd3f28
- SHA512
  
  f203b80af2e62c75815e1aa05b7480d72a3aa2a06d06114c5d7b718db66cc3fcaccfffd17d70848b69abea73f756da89364e3b76bbcfd48c31473f5dd032d67f
- SSDEEP
  
  6144:YrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYZg:Yrk4u6/eIo4nlu7trxFtApfgMyrpjYZg
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2