53ed607cdc1b2d0877241ddba0e8d9db6a44aa35cf6caa2bfa9238f06f7a8343 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53ed607cdc1b2d0877241ddba0e8d9db6a44aa35cf6caa2bfa9238f06f7a8343
Size

313KB
Sample

221127-vw4q8sec38
MD5

ba1de01a8ec6728e64527fe4a07a4084
SHA1

d0509e5c1fe232edb3f2ec98dd52d7b2d6e6ebcf
SHA256

53ed607cdc1b2d0877241ddba0e8d9db6a44aa35cf6caa2bfa9238f06f7a8343
SHA512

807ca3c57f35bdbb3206a66e165d077de9acd250b9091f34f41d57a0a3218cb175e761633d1821586d7d9cb06ed17fda09452dc5396d9358231aad9f8aff3ec8
SSDEEP

6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LR:Xryu6/eIo4vMResyEf0uP9d9UG0R

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  53ed607cdc1b2d0877241ddba0e8d9db6a44aa35cf6caa2bfa9238f06f7a8343
- Size
  
  313KB
- MD5
  
  ba1de01a8ec6728e64527fe4a07a4084
- SHA1
  
  d0509e5c1fe232edb3f2ec98dd52d7b2d6e6ebcf
- SHA256
  
  53ed607cdc1b2d0877241ddba0e8d9db6a44aa35cf6caa2bfa9238f06f7a8343
- SHA512
  
  807ca3c57f35bdbb3206a66e165d077de9acd250b9091f34f41d57a0a3218cb175e761633d1821586d7d9cb06ed17fda09452dc5396d9358231aad9f8aff3ec8
- SSDEEP
  
  6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LR:Xryu6/eIo4vMResyEf0uP9d9UG0R
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2