de0a6f45ed19d82f4d0b0483816380f3d21d44a84e6f2f4ba9e7072d72a570ec | Triage

Sharing

General

Target

de0a6f45ed19d82f4d0b0483816380f3d21d44a84e6f2f4ba9e7072d72a570ec
Size

326KB
Sample

221127-3j847agc46
MD5

8d0b098158bb929cfff80eb0b31bd17e
SHA1

23e1ed9b1772c16d41e5a262b5d440c0ce588919
SHA256

de0a6f45ed19d82f4d0b0483816380f3d21d44a84e6f2f4ba9e7072d72a570ec
SHA512

92b81a1e2c3574d2e165ee19814792c12b4abf217e2e2289001adb3def8625bd462b5869522874e57cd37150823d2e34d79a9a010ef4a2749cfd3872161899b5
SSDEEP

6144:Sr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgk:Sr4gu6/eIo4nULZKMRwxuPfk68

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  de0a6f45ed19d82f4d0b0483816380f3d21d44a84e6f2f4ba9e7072d72a570ec
- Size
  
  326KB
- MD5
  
  8d0b098158bb929cfff80eb0b31bd17e
- SHA1
  
  23e1ed9b1772c16d41e5a262b5d440c0ce588919
- SHA256
  
  de0a6f45ed19d82f4d0b0483816380f3d21d44a84e6f2f4ba9e7072d72a570ec
- SHA512
  
  92b81a1e2c3574d2e165ee19814792c12b4abf217e2e2289001adb3def8625bd462b5869522874e57cd37150823d2e34d79a9a010ef4a2749cfd3872161899b5
- SSDEEP
  
  6144:Sr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgk:Sr4gu6/eIo4nULZKMRwxuPfk68
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2