5a9ff6f4ab31c842138197fd28b0b24a5c1c3b4c05fac31fba5bd1ce8de3388f | Triage

Sharing

General

Target

5a9ff6f4ab31c842138197fd28b0b24a5c1c3b4c05fac31fba5bd1ce8de3388f
Size

314KB
Sample

221124-edc8kafc69
MD5

9ecb4e494e30097dc02df194177e9c5c
SHA1

2c0dbd77378bd1c225aa5013bee1430425ce4fc6
SHA256

5a9ff6f4ab31c842138197fd28b0b24a5c1c3b4c05fac31fba5bd1ce8de3388f
SHA512

74aede09a2a732914a386543f83dab7e4325c0c531436d48c733e46b41f916c5452b337f07129d2192e4fa56b2c4afe0d653fc4604013a73ad71eefb20ff6d80
SSDEEP

6144:YrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw2:Yr1kuveY35YO67Wxz7w2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5a9ff6f4ab31c842138197fd28b0b24a5c1c3b4c05fac31fba5bd1ce8de3388f
- Size
  
  314KB
- MD5
  
  9ecb4e494e30097dc02df194177e9c5c
- SHA1
  
  2c0dbd77378bd1c225aa5013bee1430425ce4fc6
- SHA256
  
  5a9ff6f4ab31c842138197fd28b0b24a5c1c3b4c05fac31fba5bd1ce8de3388f
- SHA512
  
  74aede09a2a732914a386543f83dab7e4325c0c531436d48c733e46b41f916c5452b337f07129d2192e4fa56b2c4afe0d653fc4604013a73ad71eefb20ff6d80
- SSDEEP
  
  6144:YrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw2:Yr1kuveY35YO67Wxz7w2
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2