29abdba972ceae11902f619be548da353a8c7879f0f2f5b81f6b49926bb9cdf3 | Triage

Sharing

General

Target

29abdba972ceae11902f619be548da353a8c7879f0f2f5b81f6b49926bb9cdf3
Size

327KB
Sample

221123-kj5snahb76
MD5

ad325ad274127f9e342fbc93b8f498c9
SHA1

2f126a1d9e1eb8e0efe59318ad35d4e631c49264
SHA256

29abdba972ceae11902f619be548da353a8c7879f0f2f5b81f6b49926bb9cdf3
SHA512

1f57c81805c20cc133af469ad219f1d15dacfe4a7fedf2a904fcdb228cda246441f6ddb1d3b02c9bab15446f833ab064dd7d7d21c5162c67cd8601865d4cedeb
SSDEEP

6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FW:hr4iu6/eIo4Rsw33AtsmQv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  29abdba972ceae11902f619be548da353a8c7879f0f2f5b81f6b49926bb9cdf3
- Size
  
  327KB
- MD5
  
  ad325ad274127f9e342fbc93b8f498c9
- SHA1
  
  2f126a1d9e1eb8e0efe59318ad35d4e631c49264
- SHA256
  
  29abdba972ceae11902f619be548da353a8c7879f0f2f5b81f6b49926bb9cdf3
- SHA512
  
  1f57c81805c20cc133af469ad219f1d15dacfe4a7fedf2a904fcdb228cda246441f6ddb1d3b02c9bab15446f833ab064dd7d7d21c5162c67cd8601865d4cedeb
- SSDEEP
  
  6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FW:hr4iu6/eIo4Rsw33AtsmQv
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2