0769c2507deb346b0e8a4dfa71c1243705c80f750286b288c5ee69530c4f0329 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0769c2507deb346b0e8a4dfa71c1243705c80f750286b288c5ee69530c4f0329
Size

315KB
Sample

221127-wh898sfh49
MD5

f8c875ef0786b47c7d2e765abe0f1813
SHA1

3a37421df3dd74bab9de0707f3f42ab4bd1aa1c1
SHA256

0769c2507deb346b0e8a4dfa71c1243705c80f750286b288c5ee69530c4f0329
SHA512

e5cdfed2e393edf30e9649dadc4478fb8ded10e65c12c470059572a97dba200a84d535932365f6be682d46b1d8bbcea9e6b88c440a711ed2c1290dadfa153293
SSDEEP

6144:3rpbUzkuvcBYC47l2xyfalkLUsx4Y0k8ojcX/pJ2enmrIJzO1LBut0njxxuQ9UL:3rakuveY3hfaaLUsx4JkxjYJ2emrCz2g

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0769c2507deb346b0e8a4dfa71c1243705c80f750286b288c5ee69530c4f0329
- Size
  
  315KB
- MD5
  
  f8c875ef0786b47c7d2e765abe0f1813
- SHA1
  
  3a37421df3dd74bab9de0707f3f42ab4bd1aa1c1
- SHA256
  
  0769c2507deb346b0e8a4dfa71c1243705c80f750286b288c5ee69530c4f0329
- SHA512
  
  e5cdfed2e393edf30e9649dadc4478fb8ded10e65c12c470059572a97dba200a84d535932365f6be682d46b1d8bbcea9e6b88c440a711ed2c1290dadfa153293
- SSDEEP
  
  6144:3rpbUzkuvcBYC47l2xyfalkLUsx4Y0k8ojcX/pJ2enmrIJzO1LBut0njxxuQ9UL:3rakuveY3hfaaLUsx4JkxjYJ2emrCz2g
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2