9ba34d3b70384d441594fd97c51795d0288fd1b6d666749f0551537cdc5a1dab | Triage

Sharing

General

Target

9ba34d3b70384d441594fd97c51795d0288fd1b6d666749f0551537cdc5a1dab
Size

327KB
Sample

221124-d66j5seg44
MD5

95c5bdb677baa7162d8f6476d67b586a
SHA1

8dd0eb97c4c56dce970702e0b384a78b00e2f9b3
SHA256

9ba34d3b70384d441594fd97c51795d0288fd1b6d666749f0551537cdc5a1dab
SHA512

a421ca84de4f63920bac88c8d7682b1fddf583057b80a6a05862169e3738c1dcaae7b68710c49ccea09e98a73d970266f38f9a7a1655ef35675dab9ad28901d3
SSDEEP

6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fuf:xr4iu6/eIo4Rsw33AtsmQdf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9ba34d3b70384d441594fd97c51795d0288fd1b6d666749f0551537cdc5a1dab
- Size
  
  327KB
- MD5
  
  95c5bdb677baa7162d8f6476d67b586a
- SHA1
  
  8dd0eb97c4c56dce970702e0b384a78b00e2f9b3
- SHA256
  
  9ba34d3b70384d441594fd97c51795d0288fd1b6d666749f0551537cdc5a1dab
- SHA512
  
  a421ca84de4f63920bac88c8d7682b1fddf583057b80a6a05862169e3738c1dcaae7b68710c49ccea09e98a73d970266f38f9a7a1655ef35675dab9ad28901d3
- SSDEEP
  
  6144:xr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fuf:xr4iu6/eIo4Rsw33AtsmQdf
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2