da9f72d6347b9199c3cb643f9b4864fd1da95a2c355e9e6ab21ff443bb30a7c5 | Triage

Sharing

General

Target

da9f72d6347b9199c3cb643f9b4864fd1da95a2c355e9e6ab21ff443bb30a7c5
Size

314KB
Sample

221127-ygafmahd8z
MD5

0f303372f055aa64a4fa714beacdecea
SHA1

65ee44765bf0846bb819dfaab26d53c6bf8a0e8d
SHA256

da9f72d6347b9199c3cb643f9b4864fd1da95a2c355e9e6ab21ff443bb30a7c5
SHA512

ba040b128223efcf7a822d5fc63043301f8c629bf51889132bd1ca610ff700b9ae637ddcc6951364468107d233f4d6cd5aef7db3837ddf788bbed11532a6daab
SSDEEP

6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwn:Qr1kuveY35YO67Wxz7wn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  da9f72d6347b9199c3cb643f9b4864fd1da95a2c355e9e6ab21ff443bb30a7c5
- Size
  
  314KB
- MD5
  
  0f303372f055aa64a4fa714beacdecea
- SHA1
  
  65ee44765bf0846bb819dfaab26d53c6bf8a0e8d
- SHA256
  
  da9f72d6347b9199c3cb643f9b4864fd1da95a2c355e9e6ab21ff443bb30a7c5
- SHA512
  
  ba040b128223efcf7a822d5fc63043301f8c629bf51889132bd1ca610ff700b9ae637ddcc6951364468107d233f4d6cd5aef7db3837ddf788bbed11532a6daab
- SSDEEP
  
  6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwn:Qr1kuveY35YO67Wxz7wn
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2