29944a9d4579e3a5a87251d089403798d953cd290efe80da31ae0511bbaf9d77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29944a9d4579e3a5a87251d089403798d953cd290efe80da31ae0511bbaf9d77
Size

327KB
Sample

221127-n9tpvsag3v
MD5

e077d2ca1ad54d4ca1bac8b8ffbc086e
SHA1

71e604b3ffba24dd996d5d1bdb293c6e17de37ec
SHA256

29944a9d4579e3a5a87251d089403798d953cd290efe80da31ae0511bbaf9d77
SHA512

f91d91abe949cabc129b9c3ad0194b1d052de5f1315fabc0a4015a98d11c052cdd036fbd86afb8a7088134bcb10e47cbbc0953f3fd18a8350bb0113db9843110
SSDEEP

6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fb:pr4iu6/eIo4Rsw33AtsmQq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  29944a9d4579e3a5a87251d089403798d953cd290efe80da31ae0511bbaf9d77
- Size
  
  327KB
- MD5
  
  e077d2ca1ad54d4ca1bac8b8ffbc086e
- SHA1
  
  71e604b3ffba24dd996d5d1bdb293c6e17de37ec
- SHA256
  
  29944a9d4579e3a5a87251d089403798d953cd290efe80da31ae0511bbaf9d77
- SHA512
  
  f91d91abe949cabc129b9c3ad0194b1d052de5f1315fabc0a4015a98d11c052cdd036fbd86afb8a7088134bcb10e47cbbc0953f3fd18a8350bb0113db9843110
- SSDEEP
  
  6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fb:pr4iu6/eIo4Rsw33AtsmQq
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2