e9891598ac37a00ea5f44ef97696d849aae0bc09cd3c74744f8077f3cc4651e3 | Triage

Sharing

General

Target

e9891598ac37a00ea5f44ef97696d849aae0bc09cd3c74744f8077f3cc4651e3
Size

304KB
Sample

221123-ktmptshf22
MD5

5aded08b9dfe1b35684b810270166537
SHA1

b49343fdddc5812a16eea569a72591db0f41cdf2
SHA256

e9891598ac37a00ea5f44ef97696d849aae0bc09cd3c74744f8077f3cc4651e3
SHA512

48fcc48e80f1752144c076443bc7c9b24892cfa1881fee8f192a6fa65a4d52f00dc50a973b0fcefaf6e98bcfd59f12c91e7ff6098abfa0b748ffe8ecfc0ebc79
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPt:Nrkuu6/eIo4tQW62T+uTwM6YVxm24t

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e9891598ac37a00ea5f44ef97696d849aae0bc09cd3c74744f8077f3cc4651e3
- Size
  
  304KB
- MD5
  
  5aded08b9dfe1b35684b810270166537
- SHA1
  
  b49343fdddc5812a16eea569a72591db0f41cdf2
- SHA256
  
  e9891598ac37a00ea5f44ef97696d849aae0bc09cd3c74744f8077f3cc4651e3
- SHA512
  
  48fcc48e80f1752144c076443bc7c9b24892cfa1881fee8f192a6fa65a4d52f00dc50a973b0fcefaf6e98bcfd59f12c91e7ff6098abfa0b748ffe8ecfc0ebc79
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPt:Nrkuu6/eIo4tQW62T+uTwM6YVxm24t
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2