e9ca64f29646954af9a2a8f2d6a9019b3f8a454dd6efe5ddb9053fadb79fcd6a | Triage

Sharing

General

Target

e9ca64f29646954af9a2a8f2d6a9019b3f8a454dd6efe5ddb9053fadb79fcd6a
Size

326KB
Sample

221127-kw1dpshe7z
MD5

4526658c9ba159c524f5bd474ad6921f
SHA1

91e3ddfdc94f82e38488506da8d01b5a647d3b3a
SHA256

e9ca64f29646954af9a2a8f2d6a9019b3f8a454dd6efe5ddb9053fadb79fcd6a
SHA512

a11e683c3c37e50fc842afb87efb5611808cb882803b53d20ae2296f6832d0125daddaaa8a70f36dc0aee435054113c2912e3ab23acc6bf4f49a91dccd45aeb2
SSDEEP

6144:Pr469uEo2S1YnQmCX492DkwNP3qpYFhVq5fRr7kW2hjCmPLSysJmaN:Pr4iu6/eIo44O0W2UY2yyN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e9ca64f29646954af9a2a8f2d6a9019b3f8a454dd6efe5ddb9053fadb79fcd6a
- Size
  
  326KB
- MD5
  
  4526658c9ba159c524f5bd474ad6921f
- SHA1
  
  91e3ddfdc94f82e38488506da8d01b5a647d3b3a
- SHA256
  
  e9ca64f29646954af9a2a8f2d6a9019b3f8a454dd6efe5ddb9053fadb79fcd6a
- SHA512
  
  a11e683c3c37e50fc842afb87efb5611808cb882803b53d20ae2296f6832d0125daddaaa8a70f36dc0aee435054113c2912e3ab23acc6bf4f49a91dccd45aeb2
- SSDEEP
  
  6144:Pr469uEo2S1YnQmCX492DkwNP3qpYFhVq5fRr7kW2hjCmPLSysJmaN:Pr4iu6/eIo44O0W2UY2yyN
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2