1a586acff9a686a25c10e185da617a33098f1e3c1b5bd8cc36490547ad7ce26f | Triage

Sharing

General

Target

1a586acff9a686a25c10e185da617a33098f1e3c1b5bd8cc36490547ad7ce26f
Size

327KB
Sample

221128-avds7sba48
MD5

aacf52fa04bacfbaaaf1ed704664ffbd
SHA1

35888849e759a2478489da5a779166436e69e036
SHA256

1a586acff9a686a25c10e185da617a33098f1e3c1b5bd8cc36490547ad7ce26f
SHA512

541afddca3b2ed218b37496d78ec37986dad3764651ddca515e89817585bacb20c560b73bb49ce0cf74a754f88519f5c24d49fac638911376e31ba089409e212
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FA:Zr4iu6/eIo4Rsw33AtsmQ1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1a586acff9a686a25c10e185da617a33098f1e3c1b5bd8cc36490547ad7ce26f
- Size
  
  327KB
- MD5
  
  aacf52fa04bacfbaaaf1ed704664ffbd
- SHA1
  
  35888849e759a2478489da5a779166436e69e036
- SHA256
  
  1a586acff9a686a25c10e185da617a33098f1e3c1b5bd8cc36490547ad7ce26f
- SHA512
  
  541afddca3b2ed218b37496d78ec37986dad3764651ddca515e89817585bacb20c560b73bb49ce0cf74a754f88519f5c24d49fac638911376e31ba089409e212
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FA:Zr4iu6/eIo4Rsw33AtsmQ1
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2