5db7ee0f89681d644596533b90da8993985a079e8a8c01614ecbd49ae47ae060 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5db7ee0f89681d644596533b90da8993985a079e8a8c01614ecbd49ae47ae060
Size

316KB
Sample

221127-v3ytkaeg49
MD5

d66774ed487684819edca2daceb2772c
SHA1

853e32645ab98448a369cc9269e5ffd4ee6677bc
SHA256

5db7ee0f89681d644596533b90da8993985a079e8a8c01614ecbd49ae47ae060
SHA512

a0849a452b68762f829623830f4ec24b91eea54788e47bd0f2f0bc699500bc1043da899e9cb168ab2378989e3be510084635a06e942b0f98bee569aaba25aa9c
SSDEEP

6144:Tr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhY8:Tr0kuveY3cY1cia66MGd0Vs9BdNf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5db7ee0f89681d644596533b90da8993985a079e8a8c01614ecbd49ae47ae060
- Size
  
  316KB
- MD5
  
  d66774ed487684819edca2daceb2772c
- SHA1
  
  853e32645ab98448a369cc9269e5ffd4ee6677bc
- SHA256
  
  5db7ee0f89681d644596533b90da8993985a079e8a8c01614ecbd49ae47ae060
- SHA512
  
  a0849a452b68762f829623830f4ec24b91eea54788e47bd0f2f0bc699500bc1043da899e9cb168ab2378989e3be510084635a06e942b0f98bee569aaba25aa9c
- SSDEEP
  
  6144:Tr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhY8:Tr0kuveY3cY1cia66MGd0Vs9BdNf
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2