0ec5b669d048de4216723d1c04403a86389b11dd175fafba940cff30f9344745 | Triage

Sharing

General

Target

0ec5b669d048de4216723d1c04403a86389b11dd175fafba940cff30f9344745
Size

313KB
Sample

221123-kqevtahd79
MD5

99005ed86a5b6df7fdecae20b1960013
SHA1

b684777324465e437ca44ffd3e3044aae6bc3096
SHA256

0ec5b669d048de4216723d1c04403a86389b11dd175fafba940cff30f9344745
SHA512

f335b7476a3fb5c6fe9051b783c0ffcf29b29d4ddb0e122e28574366fdf5b84dca478e970a069689163e288071c719d8d756f1b733ecb98ad2cd3de8ea5155b7
SSDEEP

6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lv:/ryu6/eIo4vMResyEf0uP9d9UG0v

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0ec5b669d048de4216723d1c04403a86389b11dd175fafba940cff30f9344745
- Size
  
  313KB
- MD5
  
  99005ed86a5b6df7fdecae20b1960013
- SHA1
  
  b684777324465e437ca44ffd3e3044aae6bc3096
- SHA256
  
  0ec5b669d048de4216723d1c04403a86389b11dd175fafba940cff30f9344745
- SHA512
  
  f335b7476a3fb5c6fe9051b783c0ffcf29b29d4ddb0e122e28574366fdf5b84dca478e970a069689163e288071c719d8d756f1b733ecb98ad2cd3de8ea5155b7
- SSDEEP
  
  6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lv:/ryu6/eIo4vMResyEf0uP9d9UG0v
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2