b5f43e9dcd99dd0adbb7620b095710fac3ed8350393f0e7a490d6561b0442065 | Triage

Sharing

General

Target

b5f43e9dcd99dd0adbb7620b095710fac3ed8350393f0e7a490d6561b0442065
Size

304KB
Sample

221124-enppcaga93
MD5

a44b1441e8754a5975c0c84e8b6d998e
SHA1

e489616564bf03f6d5fc71f9a4644b4addfed0af
SHA256

b5f43e9dcd99dd0adbb7620b095710fac3ed8350393f0e7a490d6561b0442065
SHA512

e86efb3ebe7edf42419e03f72d6fd765468fb2ab175fa6ed50e1092fee18630a7c70416289de9bfb1412c3c8ee7b045ba11ee0c1074466893ae27016ce2d8374
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPo:Nrkuu6/eIo4tQW62T+uTwM6YVxm24o

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b5f43e9dcd99dd0adbb7620b095710fac3ed8350393f0e7a490d6561b0442065
- Size
  
  304KB
- MD5
  
  a44b1441e8754a5975c0c84e8b6d998e
- SHA1
  
  e489616564bf03f6d5fc71f9a4644b4addfed0af
- SHA256
  
  b5f43e9dcd99dd0adbb7620b095710fac3ed8350393f0e7a490d6561b0442065
- SHA512
  
  e86efb3ebe7edf42419e03f72d6fd765468fb2ab175fa6ed50e1092fee18630a7c70416289de9bfb1412c3c8ee7b045ba11ee0c1074466893ae27016ce2d8374
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPo:Nrkuu6/eIo4tQW62T+uTwM6YVxm24o
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2