e9ffea2891aabe752463e42ad0a8509cc49461cf425af32785e89c725615202d | Triage

Sharing

General

Target

e9ffea2891aabe752463e42ad0a8509cc49461cf425af32785e89c725615202d
Size

325KB
Sample

221127-kwxmtadg78
MD5

4e24d4bd6cf6033627e3c52d5a8bcb95
SHA1

fda8e0c2a3dcddff33c593b1a3a2fa97b6fea7a3
SHA256

e9ffea2891aabe752463e42ad0a8509cc49461cf425af32785e89c725615202d
SHA512

f59d6b29580df603141b0b4c8a11282f602841fcee73cc6e5e28c861e3c0244283bf851e3a2cb03a1003abac65cd6939abac2be23ec84d5b903bce03c78bab6c
SSDEEP

6144:Mr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oA:Mr1B3u6/eIo4ArVUBQCCYOqmO5oA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e9ffea2891aabe752463e42ad0a8509cc49461cf425af32785e89c725615202d
- Size
  
  325KB
- MD5
  
  4e24d4bd6cf6033627e3c52d5a8bcb95
- SHA1
  
  fda8e0c2a3dcddff33c593b1a3a2fa97b6fea7a3
- SHA256
  
  e9ffea2891aabe752463e42ad0a8509cc49461cf425af32785e89c725615202d
- SHA512
  
  f59d6b29580df603141b0b4c8a11282f602841fcee73cc6e5e28c861e3c0244283bf851e3a2cb03a1003abac65cd6939abac2be23ec84d5b903bce03c78bab6c
- SSDEEP
  
  6144:Mr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oA:Mr1B3u6/eIo4ArVUBQCCYOqmO5oA
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2