2e4947b6c876ce8a2be2d3ebeb3f2d09d7aa4a30e3b87299a81433a01e49fcb2 | Triage

Sharing

General

Target

2e4947b6c876ce8a2be2d3ebeb3f2d09d7aa4a30e3b87299a81433a01e49fcb2
Size

304KB
Sample

221123-kzzlksdc3s
MD5

c24bba7f2a15e9f283f4ee47b63b83f6
SHA1

09f68c90d7e3356fc45559af011af9eba146340d
SHA256

2e4947b6c876ce8a2be2d3ebeb3f2d09d7aa4a30e3b87299a81433a01e49fcb2
SHA512

afc33598db074a6f94c59c199ac085a968a139759e221f825bb1277f6556b6123cfb9cbf25b7c908dc02e94d0b74470013e31d4ae3e2979e8d20cfe984744afe
SSDEEP

6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPS:drkuu6/eIo4tQW62T+uTwM6YVxm24S

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2e4947b6c876ce8a2be2d3ebeb3f2d09d7aa4a30e3b87299a81433a01e49fcb2
- Size
  
  304KB
- MD5
  
  c24bba7f2a15e9f283f4ee47b63b83f6
- SHA1
  
  09f68c90d7e3356fc45559af011af9eba146340d
- SHA256
  
  2e4947b6c876ce8a2be2d3ebeb3f2d09d7aa4a30e3b87299a81433a01e49fcb2
- SHA512
  
  afc33598db074a6f94c59c199ac085a968a139759e221f825bb1277f6556b6123cfb9cbf25b7c908dc02e94d0b74470013e31d4ae3e2979e8d20cfe984744afe
- SSDEEP
  
  6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPS:drkuu6/eIo4tQW62T+uTwM6YVxm24S
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2