5e70c4b5cb40966f8d67718d79580000846127ceb25e24565de0521f5c94a7a8 | Triage

Sharing

General

Target

5e70c4b5cb40966f8d67718d79580000846127ceb25e24565de0521f5c94a7a8
Size

304KB
Sample

221128-a42avsbf59
MD5

c32f45cbb46f029bc91dec7b0d0a8a88
SHA1

76574b20230e8e55694eb8490444013a5e92f38d
SHA256

5e70c4b5cb40966f8d67718d79580000846127ceb25e24565de0521f5c94a7a8
SHA512

0b98e89734457a3a4596ffee7c1cad7e1bc83686767a105259496deb1e283a0aa787b25d91085942bef2e3ee9d23615b10e14d61839913c646a774b3753ab5ed
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPD:Nrkuu6/eIo4tQW62T+uTwM6YVxm24D

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5e70c4b5cb40966f8d67718d79580000846127ceb25e24565de0521f5c94a7a8
- Size
  
  304KB
- MD5
  
  c32f45cbb46f029bc91dec7b0d0a8a88
- SHA1
  
  76574b20230e8e55694eb8490444013a5e92f38d
- SHA256
  
  5e70c4b5cb40966f8d67718d79580000846127ceb25e24565de0521f5c94a7a8
- SHA512
  
  0b98e89734457a3a4596ffee7c1cad7e1bc83686767a105259496deb1e283a0aa787b25d91085942bef2e3ee9d23615b10e14d61839913c646a774b3753ab5ed
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPD:Nrkuu6/eIo4tQW62T+uTwM6YVxm24D
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2