4447312c81bd41981750c05babc2d91583ac1b99880c737b82d61f17f6e8c77b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4447312c81bd41981750c05babc2d91583ac1b99880c737b82d61f17f6e8c77b
Size

313KB
Sample

221128-al25faad39
MD5

b64b0f1ae0d3006605f2ec10b9ed16e6
SHA1

cc327f1baa43ab60e0a733defed585d42071e309
SHA256

4447312c81bd41981750c05babc2d91583ac1b99880c737b82d61f17f6e8c77b
SHA512

a43b69f5a94c7615701af7fb765a5ca16564c3c652c0310d183bcafe5e55f21c81d0cb38718094e306934b263d8f57c1fffd41f2d3f23ac6ad33ab418dc14245
SSDEEP

6144:Hro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94d3:HrAu6/eIo4s1yR9lsc/ad3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4447312c81bd41981750c05babc2d91583ac1b99880c737b82d61f17f6e8c77b
- Size
  
  313KB
- MD5
  
  b64b0f1ae0d3006605f2ec10b9ed16e6
- SHA1
  
  cc327f1baa43ab60e0a733defed585d42071e309
- SHA256
  
  4447312c81bd41981750c05babc2d91583ac1b99880c737b82d61f17f6e8c77b
- SHA512
  
  a43b69f5a94c7615701af7fb765a5ca16564c3c652c0310d183bcafe5e55f21c81d0cb38718094e306934b263d8f57c1fffd41f2d3f23ac6ad33ab418dc14245
- SSDEEP
  
  6144:Hro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94d3:HrAu6/eIo4s1yR9lsc/ad3
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2