e1131bad8e1ea04efe79ceac84d588a7b75667d5d39a6f4bb659e078d5601332 | Triage

Sharing

General

Target

e1131bad8e1ea04efe79ceac84d588a7b75667d5d39a6f4bb659e078d5601332
Size

304KB
Sample

221123-kt49wahf37
MD5

b76abccfc0a5511008fd8219d061b6ea
SHA1

032877a6f62cc859613a9f85a3891983963a3996
SHA256

e1131bad8e1ea04efe79ceac84d588a7b75667d5d39a6f4bb659e078d5601332
SHA512

c60fce979e36f7b836d1982f127d4fe091f23b22d7f42a32f5e6a8940b4df35e9723b98df092df0a44df76a8521ca25bad099d31abe840d4a56ac06c0d1acc33
SSDEEP

6144:9rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPd:9rkuu6/eIo4tQW62T+uTwM6YVxm248M

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e1131bad8e1ea04efe79ceac84d588a7b75667d5d39a6f4bb659e078d5601332
- Size
  
  304KB
- MD5
  
  b76abccfc0a5511008fd8219d061b6ea
- SHA1
  
  032877a6f62cc859613a9f85a3891983963a3996
- SHA256
  
  e1131bad8e1ea04efe79ceac84d588a7b75667d5d39a6f4bb659e078d5601332
- SHA512
  
  c60fce979e36f7b836d1982f127d4fe091f23b22d7f42a32f5e6a8940b4df35e9723b98df092df0a44df76a8521ca25bad099d31abe840d4a56ac06c0d1acc33
- SSDEEP
  
  6144:9rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPd:9rkuu6/eIo4tQW62T+uTwM6YVxm248M
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2