a4ea3bd92f7ef5dc1e82f211214aaf8fd99ca31102b8c83f73b5f4cd7004ef96 | Triage

Sharing

General

Target

a4ea3bd92f7ef5dc1e82f211214aaf8fd99ca31102b8c83f73b5f4cd7004ef96
Size

1.8MB
Sample

221124-njn2paag33
MD5

51f26c0051e97a91145971fe5bc632ff
SHA1

770db9ad471ffd4357358bc16ff0bb6c98d71e5d
SHA256

a4ea3bd92f7ef5dc1e82f211214aaf8fd99ca31102b8c83f73b5f4cd7004ef96
SHA512

226f95fa022d5ef7b7d9ff560e44d5768d4d934a90a5d28e14c331778cef7e06ac25a368c6dab9bb87be9869dfe9c5ae11fa01c15cbd4b03f8511047ab363c73
SSDEEP

49152:4TJvTlo5teGg9M9sS2wtG9zxuF/Vdl0g9uU+:4TJvTlouGg9QsAtG90/VdA1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a4ea3bd92f7ef5dc1e82f211214aaf8fd99ca31102b8c83f73b5f4cd7004ef96
- Size
  
  1.8MB
- MD5
  
  51f26c0051e97a91145971fe5bc632ff
- SHA1
  
  770db9ad471ffd4357358bc16ff0bb6c98d71e5d
- SHA256
  
  a4ea3bd92f7ef5dc1e82f211214aaf8fd99ca31102b8c83f73b5f4cd7004ef96
- SHA512
  
  226f95fa022d5ef7b7d9ff560e44d5768d4d934a90a5d28e14c331778cef7e06ac25a368c6dab9bb87be9869dfe9c5ae11fa01c15cbd4b03f8511047ab363c73
- SSDEEP
  
  49152:4TJvTlo5teGg9M9sS2wtG9zxuF/Vdl0g9uU+:4TJvTlouGg9QsAtG90/VdA1
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2