e3a544c98deb76351260d41dc54a11baac2738b3abf3976c54e4ad3019737083 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3a544c98deb76351260d41dc54a11baac2738b3abf3976c54e4ad3019737083
Size

313KB
Sample

221127-t7wdkacc98
MD5

03c604441a6efb98d3c5f6a78c1eade4
SHA1

12922c0feaba8def481a63923cacc350e03bed70
SHA256

e3a544c98deb76351260d41dc54a11baac2738b3abf3976c54e4ad3019737083
SHA512

84b6e80865e03d612d5af2c767ce227e7ea968c05853687fba9feab79e98774061e36e78aee27a64fbcd50c7c583f6a1e8e0118b75002e93441f611b90d4f763
SSDEEP

6144:4rJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDU:4rfu6/eIo4jVW5soVCcQovoO0DJM+Ef

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e3a544c98deb76351260d41dc54a11baac2738b3abf3976c54e4ad3019737083
- Size
  
  313KB
- MD5
  
  03c604441a6efb98d3c5f6a78c1eade4
- SHA1
  
  12922c0feaba8def481a63923cacc350e03bed70
- SHA256
  
  e3a544c98deb76351260d41dc54a11baac2738b3abf3976c54e4ad3019737083
- SHA512
  
  84b6e80865e03d612d5af2c767ce227e7ea968c05853687fba9feab79e98774061e36e78aee27a64fbcd50c7c583f6a1e8e0118b75002e93441f611b90d4f763
- SSDEEP
  
  6144:4rJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDU:4rfu6/eIo4jVW5soVCcQovoO0DJM+Ef
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2