aa5d45ea5493eab022fa20bd80584bec422b8da28e09c33fee9ecd00b7224167 | Triage

Sharing

General

Target

aa5d45ea5493eab022fa20bd80584bec422b8da28e09c33fee9ecd00b7224167
Size

304KB
Sample

221123-kxnrashg36
MD5

d80cbc2dddd8f96def3948700f7c36f1
SHA1

1d477750ce12d15f13f6fdd7b2842734eaa38f53
SHA256

aa5d45ea5493eab022fa20bd80584bec422b8da28e09c33fee9ecd00b7224167
SHA512

ca018c8dfb6f0904c0907d4ff320defaa6d372dbcce47f8215f4ab325e8e3211765b24a83bdfc095bc725218a499780d1dbe4585f55e3b76f05dde16fcf86465
SSDEEP

6144:jrkx9uEo2S1YnQmCX492DkwNP3qpYFkXdlP5IO5/OoCVHuy6SHZ86riVZkiizX9:jrkHu6/eIo4RXdrIO5/OpVHd6Ky6rizo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  aa5d45ea5493eab022fa20bd80584bec422b8da28e09c33fee9ecd00b7224167
- Size
  
  304KB
- MD5
  
  d80cbc2dddd8f96def3948700f7c36f1
- SHA1
  
  1d477750ce12d15f13f6fdd7b2842734eaa38f53
- SHA256
  
  aa5d45ea5493eab022fa20bd80584bec422b8da28e09c33fee9ecd00b7224167
- SHA512
  
  ca018c8dfb6f0904c0907d4ff320defaa6d372dbcce47f8215f4ab325e8e3211765b24a83bdfc095bc725218a499780d1dbe4585f55e3b76f05dde16fcf86465
- SSDEEP
  
  6144:jrkx9uEo2S1YnQmCX492DkwNP3qpYFkXdlP5IO5/OoCVHuy6SHZ86riVZkiizX9:jrkHu6/eIo4RXdrIO5/OpVHd6Ky6rizo
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2