6704bc8fd4e996674f0ce277e5cceecf553e833602721461d7950dc7337b86be | Triage

Sharing

General

Target

6704bc8fd4e996674f0ce277e5cceecf553e833602721461d7950dc7337b86be
Size

316KB
Sample

221124-ntlpbaee7x
MD5

a353608e64d2b6ee26a0da370cd0bcfe
SHA1

536b3f62de02023f52694b7a4df4f70e0ca6d31f
SHA256

6704bc8fd4e996674f0ce277e5cceecf553e833602721461d7950dc7337b86be
SHA512

94a209f362bc1df56e5b9ae4854974702c72f8907a87053728ca4ba931cb5630b0b5bf61e5ade5df20c5dcc660c70c8ac39336195b57375235edba02570a707d
SSDEEP

6144:9rybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phoO:9rLkuveY3EMK9ObxD/06s5w3BLO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6704bc8fd4e996674f0ce277e5cceecf553e833602721461d7950dc7337b86be
- Size
  
  316KB
- MD5
  
  a353608e64d2b6ee26a0da370cd0bcfe
- SHA1
  
  536b3f62de02023f52694b7a4df4f70e0ca6d31f
- SHA256
  
  6704bc8fd4e996674f0ce277e5cceecf553e833602721461d7950dc7337b86be
- SHA512
  
  94a209f362bc1df56e5b9ae4854974702c72f8907a87053728ca4ba931cb5630b0b5bf61e5ade5df20c5dcc660c70c8ac39336195b57375235edba02570a707d
- SSDEEP
  
  6144:9rybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phoO:9rLkuveY3EMK9ObxD/06s5w3BLO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2