cc382551e31947070b031a602e710acb0e3625da4db9ecb81a7e08990bd1ed7d | Triage

Sharing

General

Target

cc382551e31947070b031a602e710acb0e3625da4db9ecb81a7e08990bd1ed7d
Size

327KB
Sample

221124-dwp5eahb5y
MD5

1ec44b1a08acce8068a50628a50d4602
SHA1

b0e7be3e9f8bff9668e8d516243def091e35b38f
SHA256

cc382551e31947070b031a602e710acb0e3625da4db9ecb81a7e08990bd1ed7d
SHA512

102082b3818f3a1f92e20e60cf868fda046db4e0f9025ca1208bd8ce4d026d5932fa5d3fe38d0b3b9d3ce58b187d35141992467490fc8a6c73312ee68acc0599
SSDEEP

6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FH:pr4iu6/eIo4Rsw33AtsmQC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cc382551e31947070b031a602e710acb0e3625da4db9ecb81a7e08990bd1ed7d
- Size
  
  327KB
- MD5
  
  1ec44b1a08acce8068a50628a50d4602
- SHA1
  
  b0e7be3e9f8bff9668e8d516243def091e35b38f
- SHA256
  
  cc382551e31947070b031a602e710acb0e3625da4db9ecb81a7e08990bd1ed7d
- SHA512
  
  102082b3818f3a1f92e20e60cf868fda046db4e0f9025ca1208bd8ce4d026d5932fa5d3fe38d0b3b9d3ce58b187d35141992467490fc8a6c73312ee68acc0599
- SSDEEP
  
  6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FH:pr4iu6/eIo4Rsw33AtsmQC
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2