3a9556970c6e1bd4c87e03fb26dd91e31ce866182e51c06d11b3d4927a8e2a5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a9556970c6e1bd4c87e03fb26dd91e31ce866182e51c06d11b3d4927a8e2a5e
Size

313KB
Sample

221127-lfww1sfd23
MD5

d4c91d3f3a3eb90a69095b140ca3bda5
SHA1

8d2c5d213fff1f293b6d7a4c346db69e55f2d21a
SHA256

3a9556970c6e1bd4c87e03fb26dd91e31ce866182e51c06d11b3d4927a8e2a5e
SHA512

bbb8a2dced9de4acab849f75403b759c5db9cc6663d7413f64efa5dfd396f8297278a59d7b17bc92fb27b0eb9053bce257a03486e7453158e770c915bd290230
SSDEEP

6144:hrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoML:hrRu6/eIo4t3PuFITKUAo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3a9556970c6e1bd4c87e03fb26dd91e31ce866182e51c06d11b3d4927a8e2a5e
- Size
  
  313KB
- MD5
  
  d4c91d3f3a3eb90a69095b140ca3bda5
- SHA1
  
  8d2c5d213fff1f293b6d7a4c346db69e55f2d21a
- SHA256
  
  3a9556970c6e1bd4c87e03fb26dd91e31ce866182e51c06d11b3d4927a8e2a5e
- SHA512
  
  bbb8a2dced9de4acab849f75403b759c5db9cc6663d7413f64efa5dfd396f8297278a59d7b17bc92fb27b0eb9053bce257a03486e7453158e770c915bd290230
- SSDEEP
  
  6144:hrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoML:hrRu6/eIo4t3PuFITKUAo
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2