336a0f680a9bc227375154d067d05ed94541e4578f30703f66bb2a9669f1bbd8 | Triage

Sharing

General

Target

336a0f680a9bc227375154d067d05ed94541e4578f30703f66bb2a9669f1bbd8
Size

304KB
Sample

221123-kzwjxshh26
MD5

a9c81175ada4d4528ef062ee9650787f
SHA1

eb4b9ab5014f6e89b8b45ba80b9ecdf8e0f3f10e
SHA256

336a0f680a9bc227375154d067d05ed94541e4578f30703f66bb2a9669f1bbd8
SHA512

440f3951569dd438e5f16f0df43a21791c2687b66cb1ed2c7e308f0abb0289696701b6913a99d52c09b266a768d4043d57bd37115b8ab77db3496f65ba4dbb24
SSDEEP

6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPL:lrkuu6/eIo4tQW62T+uTwM6YVxm24L

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  336a0f680a9bc227375154d067d05ed94541e4578f30703f66bb2a9669f1bbd8
- Size
  
  304KB
- MD5
  
  a9c81175ada4d4528ef062ee9650787f
- SHA1
  
  eb4b9ab5014f6e89b8b45ba80b9ecdf8e0f3f10e
- SHA256
  
  336a0f680a9bc227375154d067d05ed94541e4578f30703f66bb2a9669f1bbd8
- SHA512
  
  440f3951569dd438e5f16f0df43a21791c2687b66cb1ed2c7e308f0abb0289696701b6913a99d52c09b266a768d4043d57bd37115b8ab77db3496f65ba4dbb24
- SSDEEP
  
  6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPL:lrkuu6/eIo4tQW62T+uTwM6YVxm24L
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2