1eba37812ad516a0e9a8fd5af7582ffda24acab9814874c076f29405b45044a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eba37812ad516a0e9a8fd5af7582ffda24acab9814874c076f29405b45044a2
Size

322KB
Sample

221124-ejadvsfg25
MD5

97d50073b509a22aee72ab3cf3da94bd
SHA1

2217dc1228058852cab279e477a316077268a2c0
SHA256

1eba37812ad516a0e9a8fd5af7582ffda24acab9814874c076f29405b45044a2
SHA512

6887dc49e574c63f989f058d22a233a441818ac3edfb26591a97d417c52c29e5402918a6e8506ea77f62763ae861d6a07b68d67320c494065e177af10f77f373
SSDEEP

6144:QrV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xc6:QrVQu6/eIo4qQdF8lEeXK11AZDqUmp6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1eba37812ad516a0e9a8fd5af7582ffda24acab9814874c076f29405b45044a2
- Size
  
  322KB
- MD5
  
  97d50073b509a22aee72ab3cf3da94bd
- SHA1
  
  2217dc1228058852cab279e477a316077268a2c0
- SHA256
  
  1eba37812ad516a0e9a8fd5af7582ffda24acab9814874c076f29405b45044a2
- SHA512
  
  6887dc49e574c63f989f058d22a233a441818ac3edfb26591a97d417c52c29e5402918a6e8506ea77f62763ae861d6a07b68d67320c494065e177af10f77f373
- SSDEEP
  
  6144:QrV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xc6:QrVQu6/eIo4qQdF8lEeXK11AZDqUmp6
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2