442e965d708162aae971d90a120c7c38cda0273e98d5046de293184008ebba13 | Triage

Sharing

General

Target

442e965d708162aae971d90a120c7c38cda0273e98d5046de293184008ebba13
Size

327KB
Sample

221127-le9fqaba8y
MD5

a577b8766c8881cc2253f06bff257dfd
SHA1

5a422ec07ed9c6f9d7d230686ed377376080d20a
SHA256

442e965d708162aae971d90a120c7c38cda0273e98d5046de293184008ebba13
SHA512

6a88e15a6017fc5a5d405bd5dba65d1663cc1510696dffda177de2621c4631093b7c1ee879dacdf0c68671d227ffdb5149a7cc39bcf5c29877abd9bef5ba9f1e
SSDEEP

6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fx:pr4iu6/eIo4Rsw33AtsmQk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  442e965d708162aae971d90a120c7c38cda0273e98d5046de293184008ebba13
- Size
  
  327KB
- MD5
  
  a577b8766c8881cc2253f06bff257dfd
- SHA1
  
  5a422ec07ed9c6f9d7d230686ed377376080d20a
- SHA256
  
  442e965d708162aae971d90a120c7c38cda0273e98d5046de293184008ebba13
- SHA512
  
  6a88e15a6017fc5a5d405bd5dba65d1663cc1510696dffda177de2621c4631093b7c1ee879dacdf0c68671d227ffdb5149a7cc39bcf5c29877abd9bef5ba9f1e
- SSDEEP
  
  6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fx:pr4iu6/eIo4Rsw33AtsmQk
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2