375fa4909d6a3a2cb92ec928c565b7ed2ab8531baa659cf5574a237d131c5160 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

375fa4909d6a3a2cb92ec928c565b7ed2ab8531baa659cf5574a237d131c5160
Size

314KB
Sample

221127-vxpnpshg9z
MD5

996d97184d8029b5ca7fd25d8dd43b99
SHA1

5d5b90370be746306b9b774e48c406b0cba16b9d
SHA256

375fa4909d6a3a2cb92ec928c565b7ed2ab8531baa659cf5574a237d131c5160
SHA512

d3ce2dc154d9b27fd4d72c4ded54f1f5dd5c98e856989a29032839091cd30dd9f75cea5f51799368b3155643a25287ca5094a1aa318dde8f2757498a27e982d2
SSDEEP

6144:ArAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwPY:Ar1kuveY35YO67Wxz7wPY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  375fa4909d6a3a2cb92ec928c565b7ed2ab8531baa659cf5574a237d131c5160
- Size
  
  314KB
- MD5
  
  996d97184d8029b5ca7fd25d8dd43b99
- SHA1
  
  5d5b90370be746306b9b774e48c406b0cba16b9d
- SHA256
  
  375fa4909d6a3a2cb92ec928c565b7ed2ab8531baa659cf5574a237d131c5160
- SHA512
  
  d3ce2dc154d9b27fd4d72c4ded54f1f5dd5c98e856989a29032839091cd30dd9f75cea5f51799368b3155643a25287ca5094a1aa318dde8f2757498a27e982d2
- SSDEEP
  
  6144:ArAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwPY:Ar1kuveY35YO67Wxz7wPY
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2