a7b30538f5ebb1db4f02c3764cab6bb2f2844296d327da0c1137866b7d4c2fc6 | Triage

Sharing

General

Target

a7b30538f5ebb1db4f02c3764cab6bb2f2844296d327da0c1137866b7d4c2fc6
Size

304KB
Sample

221124-enxpysbc61
MD5

b10eedceb3aa93efd3abd67b9b82a4ab
SHA1

facc33c77acb45d76fd93c2c6d06da1e8a316037
SHA256

a7b30538f5ebb1db4f02c3764cab6bb2f2844296d327da0c1137866b7d4c2fc6
SHA512

c3614d5c9a3bef2fa7b1ed5170ab28b5159fbf412315c95f6f2ac99566982d5dacb37d45f4b5d14cf9d977802e6aff1f50580cff67f76cecd4e43c3455230dd4
SSDEEP

6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPQ:1rkuu6/eIo4tQW62T+uTwM6YVxm24Q

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a7b30538f5ebb1db4f02c3764cab6bb2f2844296d327da0c1137866b7d4c2fc6
- Size
  
  304KB
- MD5
  
  b10eedceb3aa93efd3abd67b9b82a4ab
- SHA1
  
  facc33c77acb45d76fd93c2c6d06da1e8a316037
- SHA256
  
  a7b30538f5ebb1db4f02c3764cab6bb2f2844296d327da0c1137866b7d4c2fc6
- SHA512
  
  c3614d5c9a3bef2fa7b1ed5170ab28b5159fbf412315c95f6f2ac99566982d5dacb37d45f4b5d14cf9d977802e6aff1f50580cff67f76cecd4e43c3455230dd4
- SSDEEP
  
  6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPQ:1rkuu6/eIo4tQW62T+uTwM6YVxm24Q
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2