d45e9fb0f16d5a0085a00c1a74ffc549f909318841ed69641a3fe424361ea0c5 | Triage

Sharing

General

Target

d45e9fb0f16d5a0085a00c1a74ffc549f909318841ed69641a3fe424361ea0c5
Size

314KB
Sample

221124-dtkf5sdg52
MD5

a771b1ea6232d9be27925eaedd6e33cb
SHA1

b9724b59fd6da7ab7d9427a4ed37f61e6d6c4562
SHA256

d45e9fb0f16d5a0085a00c1a74ffc549f909318841ed69641a3fe424361ea0c5
SHA512

8a72842d5dc9d2dfd813c5d5e1405bdf8e4b58a49bf66b7e1050301c6b735493ac61d03aa1eb39b5028555fd3b5dccf9150c9ed1d5e6e747846fcf9ccfe75dd0
SSDEEP

6144:HrYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZ2:HrdkuveY3CvI5Zdkj6OEu1HS2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d45e9fb0f16d5a0085a00c1a74ffc549f909318841ed69641a3fe424361ea0c5
- Size
  
  314KB
- MD5
  
  a771b1ea6232d9be27925eaedd6e33cb
- SHA1
  
  b9724b59fd6da7ab7d9427a4ed37f61e6d6c4562
- SHA256
  
  d45e9fb0f16d5a0085a00c1a74ffc549f909318841ed69641a3fe424361ea0c5
- SHA512
  
  8a72842d5dc9d2dfd813c5d5e1405bdf8e4b58a49bf66b7e1050301c6b735493ac61d03aa1eb39b5028555fd3b5dccf9150c9ed1d5e6e747846fcf9ccfe75dd0
- SSDEEP
  
  6144:HrYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZ2:HrdkuveY3CvI5Zdkj6OEu1HS2
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2