a38b4d3f9da77327dcd72e8465d5d3491a78e41fee194718933f2f708f43e524 | Triage

Sharing

General

Target

a38b4d3f9da77327dcd72e8465d5d3491a78e41fee194718933f2f708f43e524
Size

326KB
Sample

221125-y8x11afh5v
MD5

d09be6b52208d8d97c416014cdd89544
SHA1

6ca15ad187a16763b9fefda199e940a5b11a53cc
SHA256

a38b4d3f9da77327dcd72e8465d5d3491a78e41fee194718933f2f708f43e524
SHA512

06a43678860648a043129078a6ec60b79a523cdd59bd0ecbd4478c3a7c41330063e9378e87a2ab48c05848efe2eea97b21dadafbe0d2429f5265c2da0f9baa99
SSDEEP

6144:Or4f9uEo2S1YnQmCX492DkwNP3qpYFAvZm2iODkqdNho9a8eua1BQ9GXk4HVqWS:Or4Vu6/eIo41Zm2qo8UckXDVqWS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a38b4d3f9da77327dcd72e8465d5d3491a78e41fee194718933f2f708f43e524
- Size
  
  326KB
- MD5
  
  d09be6b52208d8d97c416014cdd89544
- SHA1
  
  6ca15ad187a16763b9fefda199e940a5b11a53cc
- SHA256
  
  a38b4d3f9da77327dcd72e8465d5d3491a78e41fee194718933f2f708f43e524
- SHA512
  
  06a43678860648a043129078a6ec60b79a523cdd59bd0ecbd4478c3a7c41330063e9378e87a2ab48c05848efe2eea97b21dadafbe0d2429f5265c2da0f9baa99
- SSDEEP
  
  6144:Or4f9uEo2S1YnQmCX492DkwNP3qpYFAvZm2iODkqdNho9a8eua1BQ9GXk4HVqWS:Or4Vu6/eIo41Zm2qo8UckXDVqWS
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2