ba4a9bfeefc8278a3ed1aade9bc2dd8b4cb1dcb3b5173a85ccb421747d1df7f7 | Triage

Sharing

General

Target

ba4a9bfeefc8278a3ed1aade9bc2dd8b4cb1dcb3b5173a85ccb421747d1df7f7
Size

327KB
Sample

221127-3tvdsaha25
MD5

515762edc1a8355add859d67a6da8bee
SHA1

22096251b77f03868243d7569705531f0da10383
SHA256

ba4a9bfeefc8278a3ed1aade9bc2dd8b4cb1dcb3b5173a85ccb421747d1df7f7
SHA512

7bef830d7a642a23e8ba238ecc00375f0cc9073a7abdb01e0f91f03cd5119c7d695964997580feea19f579e9cab3f88c3b3658fd7b64ef9b9b7c285f4cb301ef
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F6:Zr4iu6/eIo4Rsw33AtsmQP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ba4a9bfeefc8278a3ed1aade9bc2dd8b4cb1dcb3b5173a85ccb421747d1df7f7
- Size
  
  327KB
- MD5
  
  515762edc1a8355add859d67a6da8bee
- SHA1
  
  22096251b77f03868243d7569705531f0da10383
- SHA256
  
  ba4a9bfeefc8278a3ed1aade9bc2dd8b4cb1dcb3b5173a85ccb421747d1df7f7
- SHA512
  
  7bef830d7a642a23e8ba238ecc00375f0cc9073a7abdb01e0f91f03cd5119c7d695964997580feea19f579e9cab3f88c3b3658fd7b64ef9b9b7c285f4cb301ef
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F6:Zr4iu6/eIo4Rsw33AtsmQP
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2