31d673ca822964e2298a2d148d96f754e299273bbaf42d0e04f17496f857f17a | Triage

Sharing

General

Target

31d673ca822964e2298a2d148d96f754e299273bbaf42d0e04f17496f857f17a
Size

325KB
Sample

221124-n6gwwscb94
MD5

d6bb13c2931648ee65fd710b0b29959e
SHA1

b5066310d4dc87d9ee68c8826b2b599447d47a20
SHA256

31d673ca822964e2298a2d148d96f754e299273bbaf42d0e04f17496f857f17a
SHA512

fac90f2b7c28fd16e8527bc6f7b7f6a347e9e17c138243d87e95a7b5d5051b4e249c7f6f6150b38bdb4365d77fc81f19dc18f056b885b3c88c4e90829e0529d9
SSDEEP

6144:Ur1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oVN:Ur1B3u6/eIo4ArVUBQCCYOqmO5o3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  31d673ca822964e2298a2d148d96f754e299273bbaf42d0e04f17496f857f17a
- Size
  
  325KB
- MD5
  
  d6bb13c2931648ee65fd710b0b29959e
- SHA1
  
  b5066310d4dc87d9ee68c8826b2b599447d47a20
- SHA256
  
  31d673ca822964e2298a2d148d96f754e299273bbaf42d0e04f17496f857f17a
- SHA512
  
  fac90f2b7c28fd16e8527bc6f7b7f6a347e9e17c138243d87e95a7b5d5051b4e249c7f6f6150b38bdb4365d77fc81f19dc18f056b885b3c88c4e90829e0529d9
- SSDEEP
  
  6144:Ur1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oVN:Ur1B3u6/eIo4ArVUBQCCYOqmO5o3
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2