ef4d205644089204c854aaa5a9073d0c50ed6c8877acc041f23e6e9850fff83c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef4d205644089204c854aaa5a9073d0c50ed6c8877acc041f23e6e9850fff83c
Size

304KB
Sample

221124-emdkpabb5y
MD5

31b020252720aa7e86e0d532bb187dca
SHA1

d12506113c055e88e8e6048930564946844317c9
SHA256

ef4d205644089204c854aaa5a9073d0c50ed6c8877acc041f23e6e9850fff83c
SHA512

a4b29e9f0e107c9fbb86a5c02dede5bc513bba5567adc7049a990b087367516b01e6e19def6937d00948b34b8830d9414365d94ec7f6d6dd184bcccba45b2132
SSDEEP

6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPk:1rkuu6/eIo4tQW62T+uTwM6YVxm24Sf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ef4d205644089204c854aaa5a9073d0c50ed6c8877acc041f23e6e9850fff83c
- Size
  
  304KB
- MD5
  
  31b020252720aa7e86e0d532bb187dca
- SHA1
  
  d12506113c055e88e8e6048930564946844317c9
- SHA256
  
  ef4d205644089204c854aaa5a9073d0c50ed6c8877acc041f23e6e9850fff83c
- SHA512
  
  a4b29e9f0e107c9fbb86a5c02dede5bc513bba5567adc7049a990b087367516b01e6e19def6937d00948b34b8830d9414365d94ec7f6d6dd184bcccba45b2132
- SSDEEP
  
  6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPk:1rkuu6/eIo4tQW62T+uTwM6YVxm24Sf
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2