d7ab4df4ca62272f3e994457314a088ca9d237a5310ab5a7dae04e266bf42498 | Triage

Sharing

General

Target

d7ab4df4ca62272f3e994457314a088ca9d237a5310ab5a7dae04e266bf42498
Size

327KB
Sample

221127-w9ymtaaa79
MD5

44aaa57f832133829ee57256d311c089
SHA1

e9970c6d86e10ca52c0f4fecca6c71b71841b521
SHA256

d7ab4df4ca62272f3e994457314a088ca9d237a5310ab5a7dae04e266bf42498
SHA512

7ffa035de1018ae1b75164d5a9f4ae03b46ac55ab6c7d50d43bce3a0ddf33b0c242d5a7197961342a6123e48c0fd5ef2c069f205c86f06722e82c0730870cc1a
SSDEEP

6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FT:hr4iu6/eIo4Rsw33AtsmQ6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d7ab4df4ca62272f3e994457314a088ca9d237a5310ab5a7dae04e266bf42498
- Size
  
  327KB
- MD5
  
  44aaa57f832133829ee57256d311c089
- SHA1
  
  e9970c6d86e10ca52c0f4fecca6c71b71841b521
- SHA256
  
  d7ab4df4ca62272f3e994457314a088ca9d237a5310ab5a7dae04e266bf42498
- SHA512
  
  7ffa035de1018ae1b75164d5a9f4ae03b46ac55ab6c7d50d43bce3a0ddf33b0c242d5a7197961342a6123e48c0fd5ef2c069f205c86f06722e82c0730870cc1a
- SSDEEP
  
  6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FT:hr4iu6/eIo4Rsw33AtsmQ6
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2