5a9d20ffcdbc99d5da9c69accb65d1f6163371e51f69cdb2943029b706c6605d | Triage

Sharing

General

Target

5a9d20ffcdbc99d5da9c69accb65d1f6163371e51f69cdb2943029b706c6605d
Size

326KB
Sample

221128-agtx9saa65
MD5

fc0a1902d2fe770a00b6da0a711279dd
SHA1

5de897e7a0510c83d4d56158c67c4fec5497ebe2
SHA256

5a9d20ffcdbc99d5da9c69accb65d1f6163371e51f69cdb2943029b706c6605d
SHA512

531e218a3b838dc72360b5a08aed7909af9d5836aab6ec13cec142597fe2d6d767ec5cc2872f7ba55c20cc4cee864ce62fbbc3f42abb9333b78c76ae92e5f0ee
SSDEEP

6144:Sr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clg8:Sr4gu6/eIo4nULZKMRwxuPfk6U

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5a9d20ffcdbc99d5da9c69accb65d1f6163371e51f69cdb2943029b706c6605d
- Size
  
  326KB
- MD5
  
  fc0a1902d2fe770a00b6da0a711279dd
- SHA1
  
  5de897e7a0510c83d4d56158c67c4fec5497ebe2
- SHA256
  
  5a9d20ffcdbc99d5da9c69accb65d1f6163371e51f69cdb2943029b706c6605d
- SHA512
  
  531e218a3b838dc72360b5a08aed7909af9d5836aab6ec13cec142597fe2d6d767ec5cc2872f7ba55c20cc4cee864ce62fbbc3f42abb9333b78c76ae92e5f0ee
- SSDEEP
  
  6144:Sr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clg8:Sr4gu6/eIo4nULZKMRwxuPfk6U
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2