39ef131920c98c7d035535dc19b005fb3fedc0e37aa6ebf94a110ffba826867a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ef131920c98c7d035535dc19b005fb3fedc0e37aa6ebf94a110ffba826867a
Size

313KB
Sample

221125-zfnsasdf95
MD5

e6824039dca58142142827b3adf57e81
SHA1

ec26f0d9fa903fba17e94af878c362c7f652d1aa
SHA256

39ef131920c98c7d035535dc19b005fb3fedc0e37aa6ebf94a110ffba826867a
SHA512

5182b2f6720448e142acb5e1f400b4b1b4b56432b7a118c20a16c640e4673b2e24871ae4a0173ce319cf90d17881a33829b571499602bdd6225518da50a3c12d
SSDEEP

6144:vrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LF:vryu6/eIo4vMResyEf0uP9d9UG0F

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  39ef131920c98c7d035535dc19b005fb3fedc0e37aa6ebf94a110ffba826867a
- Size
  
  313KB
- MD5
  
  e6824039dca58142142827b3adf57e81
- SHA1
  
  ec26f0d9fa903fba17e94af878c362c7f652d1aa
- SHA256
  
  39ef131920c98c7d035535dc19b005fb3fedc0e37aa6ebf94a110ffba826867a
- SHA512
  
  5182b2f6720448e142acb5e1f400b4b1b4b56432b7a118c20a16c640e4673b2e24871ae4a0173ce319cf90d17881a33829b571499602bdd6225518da50a3c12d
- SSDEEP
  
  6144:vrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LF:vryu6/eIo4vMResyEf0uP9d9UG0F
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2