436923095ce5794ae18a780a329dafb787061bc51477be92fee44fc4f2978b9d | Triage

Sharing

General

Target

436923095ce5794ae18a780a329dafb787061bc51477be92fee44fc4f2978b9d
Size

327KB
Sample

221128-al8l8aef4v
MD5

ea6615a2db0d7e9f9e02f0a5a5e71bac
SHA1

ac0d379014d2f72ce71e647a4ae01786937fb3f5
SHA256

436923095ce5794ae18a780a329dafb787061bc51477be92fee44fc4f2978b9d
SHA512

434d5739feecc2ba60e08298157c0b95837b6a8ca2a755b9422953e363a0b6b5acca11e3784788f318bf01887e0e3044aa44bed26dbe71d478355ae971162e1a
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FP:Zr4iu6/eIo4Rsw33AtsmQa

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  436923095ce5794ae18a780a329dafb787061bc51477be92fee44fc4f2978b9d
- Size
  
  327KB
- MD5
  
  ea6615a2db0d7e9f9e02f0a5a5e71bac
- SHA1
  
  ac0d379014d2f72ce71e647a4ae01786937fb3f5
- SHA256
  
  436923095ce5794ae18a780a329dafb787061bc51477be92fee44fc4f2978b9d
- SHA512
  
  434d5739feecc2ba60e08298157c0b95837b6a8ca2a755b9422953e363a0b6b5acca11e3784788f318bf01887e0e3044aa44bed26dbe71d478355ae971162e1a
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FP:Zr4iu6/eIo4Rsw33AtsmQa
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2