0e1072804fc9c57239510a7ba0bc5407e0047ac103b79d6d1d027ce0b27710e9 | Triage

Sharing

General

Target

0e1072804fc9c57239510a7ba0bc5407e0047ac103b79d6d1d027ce0b27710e9
Size

327KB
Sample

221123-kqhayahd85
MD5

cda1a2e78c293748cfc468735c7a9c70
SHA1

9532f3bdb09f0569c93dbe98e35993ce135964b0
SHA256

0e1072804fc9c57239510a7ba0bc5407e0047ac103b79d6d1d027ce0b27710e9
SHA512

f8b3a947c69070371d01ca6a1cc5204f16b69dd5e802b29db3b0df4cf801268f3bbf41ec053f346dedd9536d8fd11aa7948fb64732ace5e2b7ad561a43b446ab
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FR:Jr4iu6/eIo4Rsw33AtsmQ0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0e1072804fc9c57239510a7ba0bc5407e0047ac103b79d6d1d027ce0b27710e9
- Size
  
  327KB
- MD5
  
  cda1a2e78c293748cfc468735c7a9c70
- SHA1
  
  9532f3bdb09f0569c93dbe98e35993ce135964b0
- SHA256
  
  0e1072804fc9c57239510a7ba0bc5407e0047ac103b79d6d1d027ce0b27710e9
- SHA512
  
  f8b3a947c69070371d01ca6a1cc5204f16b69dd5e802b29db3b0df4cf801268f3bbf41ec053f346dedd9536d8fd11aa7948fb64732ace5e2b7ad561a43b446ab
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FR:Jr4iu6/eIo4Rsw33AtsmQ0
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2