5c294c4e02fa7f1132d3594227cfb94cce38126a43b9e5facfc6e7fea4e4f9f7 | Triage

Sharing

General

Target

5c294c4e02fa7f1132d3594227cfb94cce38126a43b9e5facfc6e7fea4e4f9f7
Size

327KB
Sample

221124-ec6hqaad9x
MD5

b7903721512822fe7543471c0a218dc3
SHA1

2a761d9c9e55f61e3aa06e1f4174b64ed3e4d08d
SHA256

5c294c4e02fa7f1132d3594227cfb94cce38126a43b9e5facfc6e7fea4e4f9f7
SHA512

990a33609d2ed2984049a3d3abf25e5c663deda527b5fc2f8cff6eb44cff3033eca2cd596295cdec6e0e61a6f8d529b1c09599d2594c10474c32421a4f6de608
SSDEEP

6144:Br4f9uEo2S1YnQmCX492DkwNP3qpYFAvZm2iODkqdNho9a8eua1BQ9GXk4HVqWX:Br4Vu6/eIo41Zm2qo8UckXDVqWX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5c294c4e02fa7f1132d3594227cfb94cce38126a43b9e5facfc6e7fea4e4f9f7
- Size
  
  327KB
- MD5
  
  b7903721512822fe7543471c0a218dc3
- SHA1
  
  2a761d9c9e55f61e3aa06e1f4174b64ed3e4d08d
- SHA256
  
  5c294c4e02fa7f1132d3594227cfb94cce38126a43b9e5facfc6e7fea4e4f9f7
- SHA512
  
  990a33609d2ed2984049a3d3abf25e5c663deda527b5fc2f8cff6eb44cff3033eca2cd596295cdec6e0e61a6f8d529b1c09599d2594c10474c32421a4f6de608
- SSDEEP
  
  6144:Br4f9uEo2S1YnQmCX492DkwNP3qpYFAvZm2iODkqdNho9a8eua1BQ9GXk4HVqWX:Br4Vu6/eIo41Zm2qo8UckXDVqWX
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2