eb28a4297e140dd146f95c4b4877ced57b23f9b8a941763f879f1fed5f585f15 | Triage

Sharing

General

Target

eb28a4297e140dd146f95c4b4877ced57b23f9b8a941763f879f1fed5f585f15
Size

314KB
Sample

221127-kwr3bsdg69
MD5

9906ae5cd774b17d9fa62579737a2df3
SHA1

c4824fb45413382b41c49dc91163601997775b24
SHA256

eb28a4297e140dd146f95c4b4877ced57b23f9b8a941763f879f1fed5f585f15
SHA512

71f8e27b9df983f76baaf58bd70a8feb08969f0a1d34c5a3d0fbbe876f4f59665b5f12b1538f21c1aab5db13c06925e6b31c2e83fb9b248089696c5e4b9d9656
SSDEEP

6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwC:Qr1kuveY35YO67Wxz7wC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  eb28a4297e140dd146f95c4b4877ced57b23f9b8a941763f879f1fed5f585f15
- Size
  
  314KB
- MD5
  
  9906ae5cd774b17d9fa62579737a2df3
- SHA1
  
  c4824fb45413382b41c49dc91163601997775b24
- SHA256
  
  eb28a4297e140dd146f95c4b4877ced57b23f9b8a941763f879f1fed5f585f15
- SHA512
  
  71f8e27b9df983f76baaf58bd70a8feb08969f0a1d34c5a3d0fbbe876f4f59665b5f12b1538f21c1aab5db13c06925e6b31c2e83fb9b248089696c5e4b9d9656
- SSDEEP
  
  6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwC:Qr1kuveY35YO67Wxz7wC
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2