d20c8f016b4b1a0b0b8f16f5861167c934b4d431e53f7aca2371ec60856d3c83 | Triage

Sharing

General

Target

d20c8f016b4b1a0b0b8f16f5861167c934b4d431e53f7aca2371ec60856d3c83
Size

315KB
Sample

221125-y2nhzsce68
MD5

2a723535b448ed6b144dcfda8bfab123
SHA1

ccb5d00dbc8540ede15aee5fed4042f920d1d1d8
SHA256

d20c8f016b4b1a0b0b8f16f5861167c934b4d431e53f7aca2371ec60856d3c83
SHA512

be60893f4751b0e08f5dfcdd92298eae21fa23d64e61eecf1682d82beca622700bdb79994012e4e0156192ca6cc0df13f7432ae21aae2b4dddfffc27c872ea26
SSDEEP

6144:8rYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZr:8rdkuveY3CvI5Zdkj6OEu1HSr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d20c8f016b4b1a0b0b8f16f5861167c934b4d431e53f7aca2371ec60856d3c83
- Size
  
  315KB
- MD5
  
  2a723535b448ed6b144dcfda8bfab123
- SHA1
  
  ccb5d00dbc8540ede15aee5fed4042f920d1d1d8
- SHA256
  
  d20c8f016b4b1a0b0b8f16f5861167c934b4d431e53f7aca2371ec60856d3c83
- SHA512
  
  be60893f4751b0e08f5dfcdd92298eae21fa23d64e61eecf1682d82beca622700bdb79994012e4e0156192ca6cc0df13f7432ae21aae2b4dddfffc27c872ea26
- SSDEEP
  
  6144:8rYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZr:8rdkuveY3CvI5Zdkj6OEu1HSr
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2