9aa44044762810fc678d65d4b226d406d8f75955856a974fd8614b96b5673fb4 | Triage

Sharing

General

Target

9aa44044762810fc678d65d4b226d406d8f75955856a974fd8614b96b5673fb4
Size

313KB
Sample

221125-y9lz5afh9z
MD5

b0c8f3e7ad4c7dd4901a53e8f13d38ab
SHA1

63b3d3029f1ecb99d5fef58c8ae3b3b3df92da43
SHA256

9aa44044762810fc678d65d4b226d406d8f75955856a974fd8614b96b5673fb4
SHA512

3a80f0eab67f24e9ef239c1825130e9235f4f3d6ed2db0c1234fa0d6b6ad4e2e14b693dad8dc79514b2ba409f220d0fbe929bf6e4a53ad0518356451b0c7258d
SSDEEP

6144:YrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYD:Yrk4u6/eIo4nlu7trxFtApfgMyrpjYD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9aa44044762810fc678d65d4b226d406d8f75955856a974fd8614b96b5673fb4
- Size
  
  313KB
- MD5
  
  b0c8f3e7ad4c7dd4901a53e8f13d38ab
- SHA1
  
  63b3d3029f1ecb99d5fef58c8ae3b3b3df92da43
- SHA256
  
  9aa44044762810fc678d65d4b226d406d8f75955856a974fd8614b96b5673fb4
- SHA512
  
  3a80f0eab67f24e9ef239c1825130e9235f4f3d6ed2db0c1234fa0d6b6ad4e2e14b693dad8dc79514b2ba409f220d0fbe929bf6e4a53ad0518356451b0c7258d
- SSDEEP
  
  6144:YrkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYD:Yrk4u6/eIo4nlu7trxFtApfgMyrpjYD
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2