a14f1b06f388abc902a7e8b501f1045b54260b54f1248e7e4a4756775d254d8b | Triage

Sharing

General

Target

a14f1b06f388abc902a7e8b501f1045b54260b54f1248e7e4a4756775d254d8b
Size

322KB
Sample

221127-ylhb2ahg81
MD5

dc7ff2c06ddf458777e36bd9a3ccfab5
SHA1

83845b59295967caf2a594c9d1e8930b664e614c
SHA256

a14f1b06f388abc902a7e8b501f1045b54260b54f1248e7e4a4756775d254d8b
SHA512

0d5b7c786fcbc9eb700078912a9848596508fa7084bc74aab33eebcff53e9f7eb05f4c0c92c486f0ea50a5a948d99e613ac485e93b547aae1d3649055010e6fe
SSDEEP

6144:ArV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xcP:ArVQu6/eIo4qQdF8lEeXK11AZDqUmpP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a14f1b06f388abc902a7e8b501f1045b54260b54f1248e7e4a4756775d254d8b
- Size
  
  322KB
- MD5
  
  dc7ff2c06ddf458777e36bd9a3ccfab5
- SHA1
  
  83845b59295967caf2a594c9d1e8930b664e614c
- SHA256
  
  a14f1b06f388abc902a7e8b501f1045b54260b54f1248e7e4a4756775d254d8b
- SHA512
  
  0d5b7c786fcbc9eb700078912a9848596508fa7084bc74aab33eebcff53e9f7eb05f4c0c92c486f0ea50a5a948d99e613ac485e93b547aae1d3649055010e6fe
- SSDEEP
  
  6144:ArV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xcP:ArVQu6/eIo4qQdF8lEeXK11AZDqUmpP
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2