a49675b2f04dd9527ac9348b8e6ef21d9c1adff9dda2ef7452da5658d0e6c394 | Triage

Sharing

General

Target

a49675b2f04dd9527ac9348b8e6ef21d9c1adff9dda2ef7452da5658d0e6c394
Size

327KB
Sample

221127-wpzz5sgd46
MD5

9b0d1905e155f79154b41af8ae963f6f
SHA1

3f2b335a4dac3f743d83d7a0a740675f90327ad1
SHA256

a49675b2f04dd9527ac9348b8e6ef21d9c1adff9dda2ef7452da5658d0e6c394
SHA512

674fb8521daa327a9e832d7c6e908138f74aecc75fd53acb52e5404ef04140bbc14caead367eb9a6fe85efb757c0d450955b0e4b6b10bde4898768e5e90b29ce
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F4:Zr4iu6/eIo4Rsw33AtsmQp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a49675b2f04dd9527ac9348b8e6ef21d9c1adff9dda2ef7452da5658d0e6c394
- Size
  
  327KB
- MD5
  
  9b0d1905e155f79154b41af8ae963f6f
- SHA1
  
  3f2b335a4dac3f743d83d7a0a740675f90327ad1
- SHA256
  
  a49675b2f04dd9527ac9348b8e6ef21d9c1adff9dda2ef7452da5658d0e6c394
- SHA512
  
  674fb8521daa327a9e832d7c6e908138f74aecc75fd53acb52e5404ef04140bbc14caead367eb9a6fe85efb757c0d450955b0e4b6b10bde4898768e5e90b29ce
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F4:Zr4iu6/eIo4Rsw33AtsmQp
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2