11ecb3b32b221adc35d80f2fce22f6e43c162fe4394cde29684378a382dabcc7 | Triage

Sharing

General

Target

11ecb3b32b221adc35d80f2fce22f6e43c162fe4394cde29684378a382dabcc7
Size

325KB
Sample

221124-ekfl9sfg82
MD5

e952b0cd9d7daa8f475a7a31bf80f6da
SHA1

f37922b68491f20ac78332a0df0dd4a3926a6aee
SHA256

11ecb3b32b221adc35d80f2fce22f6e43c162fe4394cde29684378a382dabcc7
SHA512

2413377e065f1722a29a6f447adf512642daeb5a3a11c42df51c386d1b77e41bab8d7da5653a97197ca10631de122743a57452ef6616de1dadd0d766be6b2d2b
SSDEEP

6144:8r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o1:8r1B3u6/eIo4ArVUBQCCYOqmO5o1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  11ecb3b32b221adc35d80f2fce22f6e43c162fe4394cde29684378a382dabcc7
- Size
  
  325KB
- MD5
  
  e952b0cd9d7daa8f475a7a31bf80f6da
- SHA1
  
  f37922b68491f20ac78332a0df0dd4a3926a6aee
- SHA256
  
  11ecb3b32b221adc35d80f2fce22f6e43c162fe4394cde29684378a382dabcc7
- SHA512
  
  2413377e065f1722a29a6f447adf512642daeb5a3a11c42df51c386d1b77e41bab8d7da5653a97197ca10631de122743a57452ef6616de1dadd0d766be6b2d2b
- SSDEEP
  
  6144:8r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o1:8r1B3u6/eIo4ArVUBQCCYOqmO5o1
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2