1408a7e7c7c95c8b8d770de4c49daf1abc55969cf3fac90d9a963939d2104f67 | Triage

Sharing

General

Target

1408a7e7c7c95c8b8d770de4c49daf1abc55969cf3fac90d9a963939d2104f67
Size

327KB
Sample

221126-14kwzshb95
MD5

b2d05ef9e105c0a728b5fa3c3db534ba
SHA1

ac69df78fde143e82ce903909c4a40b4cc7269ad
SHA256

1408a7e7c7c95c8b8d770de4c49daf1abc55969cf3fac90d9a963939d2104f67
SHA512

6f0b3031214fa558f53799bfb5f95968049e6e4616d2266a280eb463f773a045c3a8e1b08cadcd092e8bd144546efc25205bbdf4725cfa7fc6182db85e5e119e
SSDEEP

6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Ff:pr4iu6/eIo4Rsw33AtsmQy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1408a7e7c7c95c8b8d770de4c49daf1abc55969cf3fac90d9a963939d2104f67
- Size
  
  327KB
- MD5
  
  b2d05ef9e105c0a728b5fa3c3db534ba
- SHA1
  
  ac69df78fde143e82ce903909c4a40b4cc7269ad
- SHA256
  
  1408a7e7c7c95c8b8d770de4c49daf1abc55969cf3fac90d9a963939d2104f67
- SHA512
  
  6f0b3031214fa558f53799bfb5f95968049e6e4616d2266a280eb463f773a045c3a8e1b08cadcd092e8bd144546efc25205bbdf4725cfa7fc6182db85e5e119e
- SSDEEP
  
  6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Ff:pr4iu6/eIo4Rsw33AtsmQy
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2