610eba1ed95dbd2b63840fc39fa31389ff45cab0af545b28480f4bf9aa5c9c9e | Triage

Sharing

General

Target

610eba1ed95dbd2b63840fc39fa31389ff45cab0af545b28480f4bf9aa5c9c9e
Size

327KB
Sample

221124-eckw1sfb99
MD5

ea47a11f58e339ddf94151dcd6c5b9c6
SHA1

482e5df72a3d1ee7a9cfc07c1b6e5f7b5a111d07
SHA256

610eba1ed95dbd2b63840fc39fa31389ff45cab0af545b28480f4bf9aa5c9c9e
SHA512

be91326ec02f459d544cd431629d683f9416e3ad0b4f596d0c52956b9bf4e35fc565f9880c31814d9d6f79290a455fa3f66d73b3e8264ee0015d74d50ffdbeb2
SSDEEP

6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fi3:Br4iu6/eIo4Rsw33AtsmQ9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  610eba1ed95dbd2b63840fc39fa31389ff45cab0af545b28480f4bf9aa5c9c9e
- Size
  
  327KB
- MD5
  
  ea47a11f58e339ddf94151dcd6c5b9c6
- SHA1
  
  482e5df72a3d1ee7a9cfc07c1b6e5f7b5a111d07
- SHA256
  
  610eba1ed95dbd2b63840fc39fa31389ff45cab0af545b28480f4bf9aa5c9c9e
- SHA512
  
  be91326ec02f459d544cd431629d683f9416e3ad0b4f596d0c52956b9bf4e35fc565f9880c31814d9d6f79290a455fa3f66d73b3e8264ee0015d74d50ffdbeb2
- SSDEEP
  
  6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fi3:Br4iu6/eIo4Rsw33AtsmQ9
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2