249aee326cdd13bcdb223ab5575293387ef13df636d4747a0f394498ed9f67d7 | Triage

Sharing

General

Target

249aee326cdd13bcdb223ab5575293387ef13df636d4747a0f394498ed9f67d7
Size

347KB
Sample

221123-yaq5sshd99
MD5

430fb0b595767852fd1c5eacc3117800
SHA1

62fed75ae148665f1f9b279cc76f9d2b1e905b6c
SHA256

249aee326cdd13bcdb223ab5575293387ef13df636d4747a0f394498ed9f67d7
SHA512

7b202ffc4c7d626f0889a434fa712037af2913689de33ac31063510a489b46ced64ccb1ce23a61b49b422954e63073953f0a747fdc20b90b67382423e5a0e948
SSDEEP

6144:KrQ9uEo2S1YnQmCX492DkwNP3qpYFvxcBVjMsMctMzM8CpQKUz:KrIu6/eIo4EcBVAmtMzMEKUz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  249aee326cdd13bcdb223ab5575293387ef13df636d4747a0f394498ed9f67d7
- Size
  
  347KB
- MD5
  
  430fb0b595767852fd1c5eacc3117800
- SHA1
  
  62fed75ae148665f1f9b279cc76f9d2b1e905b6c
- SHA256
  
  249aee326cdd13bcdb223ab5575293387ef13df636d4747a0f394498ed9f67d7
- SHA512
  
  7b202ffc4c7d626f0889a434fa712037af2913689de33ac31063510a489b46ced64ccb1ce23a61b49b422954e63073953f0a747fdc20b90b67382423e5a0e948
- SSDEEP
  
  6144:KrQ9uEo2S1YnQmCX492DkwNP3qpYFvxcBVjMsMctMzM8CpQKUz:KrIu6/eIo4EcBVAmtMzMEKUz
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2