29bdcc4622f304c4c64e2e56cf4a1dc9ea4d2ec1ff2fe72475afaae9d82f6307 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29bdcc4622f304c4c64e2e56cf4a1dc9ea4d2ec1ff2fe72475afaae9d82f6307
Size

304KB
Sample

221127-yw1w5aeg43
MD5

cc994cca986e370d5c2f708cf66ebee0
SHA1

88b6126968d5eb4fc44abd50bf740c4ec62a8d84
SHA256

29bdcc4622f304c4c64e2e56cf4a1dc9ea4d2ec1ff2fe72475afaae9d82f6307
SHA512

3967bba29ec0c28d1432782eecf962aedc523133fb183323a958155ff9c2dc19edaeaeff3c5d255c12fd613b1f3885da0d5b0565ee80fd7b2f3fd10fb2161508
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP7:Nrkuu6/eIo4tQW62T+uTwM6YVxm247

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  29bdcc4622f304c4c64e2e56cf4a1dc9ea4d2ec1ff2fe72475afaae9d82f6307
- Size
  
  304KB
- MD5
  
  cc994cca986e370d5c2f708cf66ebee0
- SHA1
  
  88b6126968d5eb4fc44abd50bf740c4ec62a8d84
- SHA256
  
  29bdcc4622f304c4c64e2e56cf4a1dc9ea4d2ec1ff2fe72475afaae9d82f6307
- SHA512
  
  3967bba29ec0c28d1432782eecf962aedc523133fb183323a958155ff9c2dc19edaeaeff3c5d255c12fd613b1f3885da0d5b0565ee80fd7b2f3fd10fb2161508
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP7:Nrkuu6/eIo4tQW62T+uTwM6YVxm247
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2