03ea38d5698db5dbcdce68767d6f741a55473725529c236815760fa2936ad761 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03ea38d5698db5dbcdce68767d6f741a55473725529c236815760fa2936ad761
Size

316KB
Sample

221124-pd8dtacg57
MD5

db5f988bda92f842f90abab87d67daf2
SHA1

8c3596a32f60792241277612decf1ea31111f6e7
SHA256

03ea38d5698db5dbcdce68767d6f741a55473725529c236815760fa2936ad761
SHA512

6324b3e89d42c412ef01a2c9bc6ff2df484005fdd664011593b32d7eaf909e0cf76c48682cae94c0a3dfa022db0fde58d5a3994a27f39e3a32b3fe17d99b50c2
SSDEEP

6144:drybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phod:drLkuveY3EMK9ObxD/06s5w3BLd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  03ea38d5698db5dbcdce68767d6f741a55473725529c236815760fa2936ad761
- Size
  
  316KB
- MD5
  
  db5f988bda92f842f90abab87d67daf2
- SHA1
  
  8c3596a32f60792241277612decf1ea31111f6e7
- SHA256
  
  03ea38d5698db5dbcdce68767d6f741a55473725529c236815760fa2936ad761
- SHA512
  
  6324b3e89d42c412ef01a2c9bc6ff2df484005fdd664011593b32d7eaf909e0cf76c48682cae94c0a3dfa022db0fde58d5a3994a27f39e3a32b3fe17d99b50c2
- SSDEEP
  
  6144:drybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phod:drLkuveY3EMK9ObxD/06s5w3BLd
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2