ae1103ffb3579c226c13f511cb75f8028a8349f24f005966697ffd0b150769d9 | Triage

Sharing

General

Target

ae1103ffb3579c226c13f511cb75f8028a8349f24f005966697ffd0b150769d9
Size

327KB
Sample

221124-d49tsahg4v
MD5

bab044f74a23259256ff3e1327177b8d
SHA1

d5464b759f55d99c54d4b109df5b01809b70fd70
SHA256

ae1103ffb3579c226c13f511cb75f8028a8349f24f005966697ffd0b150769d9
SHA512

885879d7154dcb4396fba4e110606f5ec6f36baf56237e417bd0f72b36e4891af4500d54a073ab29d565daf4b29df4b74c308a424cc8a8aaa2efd1f265384a8e
SSDEEP

6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fl:pr4iu6/eIo4Rsw33AtsmQQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ae1103ffb3579c226c13f511cb75f8028a8349f24f005966697ffd0b150769d9
- Size
  
  327KB
- MD5
  
  bab044f74a23259256ff3e1327177b8d
- SHA1
  
  d5464b759f55d99c54d4b109df5b01809b70fd70
- SHA256
  
  ae1103ffb3579c226c13f511cb75f8028a8349f24f005966697ffd0b150769d9
- SHA512
  
  885879d7154dcb4396fba4e110606f5ec6f36baf56237e417bd0f72b36e4891af4500d54a073ab29d565daf4b29df4b74c308a424cc8a8aaa2efd1f265384a8e
- SSDEEP
  
  6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fl:pr4iu6/eIo4Rsw33AtsmQQ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2