de0f7b3c2c3b7d12299fc691b75c81e0db726c8e1cdb00ee105278a7e11a74b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de0f7b3c2c3b7d12299fc691b75c81e0db726c8e1cdb00ee105278a7e11a74b7
Size

313KB
Sample

221127-kyxetsea33
MD5

23cc4c615bb8148f242ca07f6be8ba2a
SHA1

df1ef7100a104bdd9b45ef9efad47448350daa08
SHA256

de0f7b3c2c3b7d12299fc691b75c81e0db726c8e1cdb00ee105278a7e11a74b7
SHA512

98b51d62e0b23b92e90104d97687ef11e9278a501f2c881018261f5e10a90551a60395881b992486402ea807c6da52532490bad532dacb49921b550142931a5c
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lh:3ryu6/eIo4vMResyEf0uP9d9UG0h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  de0f7b3c2c3b7d12299fc691b75c81e0db726c8e1cdb00ee105278a7e11a74b7
- Size
  
  313KB
- MD5
  
  23cc4c615bb8148f242ca07f6be8ba2a
- SHA1
  
  df1ef7100a104bdd9b45ef9efad47448350daa08
- SHA256
  
  de0f7b3c2c3b7d12299fc691b75c81e0db726c8e1cdb00ee105278a7e11a74b7
- SHA512
  
  98b51d62e0b23b92e90104d97687ef11e9278a501f2c881018261f5e10a90551a60395881b992486402ea807c6da52532490bad532dacb49921b550142931a5c
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lh:3ryu6/eIo4vMResyEf0uP9d9UG0h
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2