117d8ee1a26c5d67ddcff62be16da87454ae3d2f296ceb214eb5d3c1b950a142 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

117d8ee1a26c5d67ddcff62be16da87454ae3d2f296ceb214eb5d3c1b950a142
Size

314KB
Sample

221124-jaygjsbf91
MD5

a97c8813d137c92ff2076456e9e5ed90
SHA1

e9ac9bbb425fc5b2c35d45223eff4f858660d326
SHA256

117d8ee1a26c5d67ddcff62be16da87454ae3d2f296ceb214eb5d3c1b950a142
SHA512

196bc26b9c7d53aa13734d7d46c3fa002589d2b93aaaf8d8e55716cf627cb8a0180ee5af67332e55a5e4959ca2320b19e39eb113ba1956e1342ca17bede23e80
SSDEEP

6144:yr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtls:yrqkuveY3RnV6c800oIpbv0SVtls

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  117d8ee1a26c5d67ddcff62be16da87454ae3d2f296ceb214eb5d3c1b950a142
- Size
  
  314KB
- MD5
  
  a97c8813d137c92ff2076456e9e5ed90
- SHA1
  
  e9ac9bbb425fc5b2c35d45223eff4f858660d326
- SHA256
  
  117d8ee1a26c5d67ddcff62be16da87454ae3d2f296ceb214eb5d3c1b950a142
- SHA512
  
  196bc26b9c7d53aa13734d7d46c3fa002589d2b93aaaf8d8e55716cf627cb8a0180ee5af67332e55a5e4959ca2320b19e39eb113ba1956e1342ca17bede23e80
- SSDEEP
  
  6144:yr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtls:yrqkuveY3RnV6c800oIpbv0SVtls
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2