3e6f3a620484ee406c0d766869d01491f002400e6ed35a710edd70304f0c21a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e6f3a620484ee406c0d766869d01491f002400e6ed35a710edd70304f0c21a9
Size

327KB
Sample

221124-ee9cdsfd94
MD5

b1327d11dbbec697e9982e9577b0a9c1
SHA1

e9f157eb0b1ac02a46c8a8cbb326ff3cb94d7e96
SHA256

3e6f3a620484ee406c0d766869d01491f002400e6ed35a710edd70304f0c21a9
SHA512

42c368a5c13ec3d5b0ad0bf1152371a662240cc6a36131669a3655cede8925c8a1816551f4a7a1dbe25deacf4d5e81e99a76f6bf787a049a11bda50e2414c515
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fw:Rr4iu6/eIo4Rsw33AtsmQV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3e6f3a620484ee406c0d766869d01491f002400e6ed35a710edd70304f0c21a9
- Size
  
  327KB
- MD5
  
  b1327d11dbbec697e9982e9577b0a9c1
- SHA1
  
  e9f157eb0b1ac02a46c8a8cbb326ff3cb94d7e96
- SHA256
  
  3e6f3a620484ee406c0d766869d01491f002400e6ed35a710edd70304f0c21a9
- SHA512
  
  42c368a5c13ec3d5b0ad0bf1152371a662240cc6a36131669a3655cede8925c8a1816551f4a7a1dbe25deacf4d5e81e99a76f6bf787a049a11bda50e2414c515
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fw:Rr4iu6/eIo4Rsw33AtsmQV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2