67eb4d335530153631458cfe79b16bf29c14653b1254177bc910f35ff80f8217 | Triage

Sharing

General

Target

67eb4d335530153631458cfe79b16bf29c14653b1254177bc910f35ff80f8217
Size

313KB
Sample

221127-x9yhgsda62
MD5

9540a296503a03fd30dddb4f0ccdcfd0
SHA1

394742f2c1b5481dcc830e378489154c99896883
SHA256

67eb4d335530153631458cfe79b16bf29c14653b1254177bc910f35ff80f8217
SHA512

b8c5b48bc45599ade20aaebc2450580d0b12e5168bef84cf2ef3fac5d4600a17a68aba35da73f66d32525cf5e4d0541814a98e4186798dfc3f7a0af8bd042b08
SSDEEP

6144:orJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDJ:orfu6/eIo4jVW5soVCcQovoO0DJM+EoZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  67eb4d335530153631458cfe79b16bf29c14653b1254177bc910f35ff80f8217
- Size
  
  313KB
- MD5
  
  9540a296503a03fd30dddb4f0ccdcfd0
- SHA1
  
  394742f2c1b5481dcc830e378489154c99896883
- SHA256
  
  67eb4d335530153631458cfe79b16bf29c14653b1254177bc910f35ff80f8217
- SHA512
  
  b8c5b48bc45599ade20aaebc2450580d0b12e5168bef84cf2ef3fac5d4600a17a68aba35da73f66d32525cf5e4d0541814a98e4186798dfc3f7a0af8bd042b08
- SSDEEP
  
  6144:orJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDJ:orfu6/eIo4jVW5soVCcQovoO0DJM+EoZ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2