1dcb9de4ad8241add7c7d8e54b423c95cb7377b9028bff2eac51770728312285 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dcb9de4ad8241add7c7d8e54b423c95cb7377b9028bff2eac51770728312285
Size

327KB
Sample

221124-ejch8afg27
MD5

d11ad306f4e6636802b62da15bf2a8af
SHA1

11ed052f2b6cc0807c5efbee43217fe3d39e9ae2
SHA256

1dcb9de4ad8241add7c7d8e54b423c95cb7377b9028bff2eac51770728312285
SHA512

29085696c946124cbef6a2f759e9abefd6ececb1eeef33666092b9087f7b5fba34177bfcd12f75c908a793517c8e62908cdfdfe3bddb566a6203fcc59b5cffcc
SSDEEP

6144:srpbUzkuvcBYC47l2xKYEti5hHHQ9qZGoBRonSUIDdpK6KMydWK:srakuveY3PYT5xQrdVUbK6KMyd3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1dcb9de4ad8241add7c7d8e54b423c95cb7377b9028bff2eac51770728312285
- Size
  
  327KB
- MD5
  
  d11ad306f4e6636802b62da15bf2a8af
- SHA1
  
  11ed052f2b6cc0807c5efbee43217fe3d39e9ae2
- SHA256
  
  1dcb9de4ad8241add7c7d8e54b423c95cb7377b9028bff2eac51770728312285
- SHA512
  
  29085696c946124cbef6a2f759e9abefd6ececb1eeef33666092b9087f7b5fba34177bfcd12f75c908a793517c8e62908cdfdfe3bddb566a6203fcc59b5cffcc
- SSDEEP
  
  6144:srpbUzkuvcBYC47l2xKYEti5hHHQ9qZGoBRonSUIDdpK6KMydWK:srakuveY3PYT5xQrdVUbK6KMyd3
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2