9fa095704aaff9d4dd3a9d01f5b7384f943ce29138b1140e991a3ceb828fd61d | Triage

Sharing

General

Target

9fa095704aaff9d4dd3a9d01f5b7384f943ce29138b1140e991a3ceb828fd61d
Size

304KB
Sample

221123-kxtybahg44
MD5

b7b7b6f7a3591748584d91f609dedbf6
SHA1

16d549b45d3b6a6ad380b05e25a533a5418d824e
SHA256

9fa095704aaff9d4dd3a9d01f5b7384f943ce29138b1140e991a3ceb828fd61d
SHA512

397919566a098f6e20d8d92f37749ec109f74d2bcaecfee7f56025a49be3ac24d74afdefd6222909726a5afed869948b2dcabcd11bc83b81bb7fdf5bb4eef83c
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPv:Nrkuu6/eIo4tQW62T+uTwM6YVxm24v

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9fa095704aaff9d4dd3a9d01f5b7384f943ce29138b1140e991a3ceb828fd61d
- Size
  
  304KB
- MD5
  
  b7b7b6f7a3591748584d91f609dedbf6
- SHA1
  
  16d549b45d3b6a6ad380b05e25a533a5418d824e
- SHA256
  
  9fa095704aaff9d4dd3a9d01f5b7384f943ce29138b1140e991a3ceb828fd61d
- SHA512
  
  397919566a098f6e20d8d92f37749ec109f74d2bcaecfee7f56025a49be3ac24d74afdefd6222909726a5afed869948b2dcabcd11bc83b81bb7fdf5bb4eef83c
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPv:Nrkuu6/eIo4tQW62T+uTwM6YVxm24v
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2