d133f28964ba25c92c08a150e3927927bd9f8ae1070f75bf38d7640e2e1716db | Triage

Sharing

General

Target

d133f28964ba25c92c08a150e3927927bd9f8ae1070f75bf38d7640e2e1716db
Size

304KB
Sample

221127-wbgawaah7v
MD5

6ac4fa4ed4a5abfe90b59b1a6d6f992b
SHA1

966648d754a244f38e09fc54407b3c66aa79ab91
SHA256

d133f28964ba25c92c08a150e3927927bd9f8ae1070f75bf38d7640e2e1716db
SHA512

b3968f442591fdd9dde978cc317dfbf0419f873d5361f34109d8cb56178467485138a4bec68c2d5aba95ac60f411aa594fa6b073579a543189f9986abd011e2b
SSDEEP

6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPY:lrkuu6/eIo4tQW62T+uTwM6YVxm24Y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d133f28964ba25c92c08a150e3927927bd9f8ae1070f75bf38d7640e2e1716db
- Size
  
  304KB
- MD5
  
  6ac4fa4ed4a5abfe90b59b1a6d6f992b
- SHA1
  
  966648d754a244f38e09fc54407b3c66aa79ab91
- SHA256
  
  d133f28964ba25c92c08a150e3927927bd9f8ae1070f75bf38d7640e2e1716db
- SHA512
  
  b3968f442591fdd9dde978cc317dfbf0419f873d5361f34109d8cb56178467485138a4bec68c2d5aba95ac60f411aa594fa6b073579a543189f9986abd011e2b
- SSDEEP
  
  6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPY:lrkuu6/eIo4tQW62T+uTwM6YVxm24Y
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2