e12babbb10ac764028d587aef99c3912fe76063fa8e8c3f116002451004043d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e12babbb10ac764028d587aef99c3912fe76063fa8e8c3f116002451004043d8
Size

327KB
Sample

221128-egynnsgh91
MD5

7a52547052d9083c7cb853ff70db95e0
SHA1

76fb98dde7d9672aeccbd352543ded2a11de2000
SHA256

e12babbb10ac764028d587aef99c3912fe76063fa8e8c3f116002451004043d8
SHA512

6a1d903bcefdd7a2eb295f45fd8c31635280028dbe31587742fe415e2e5a5b139301ec0b29e9a77427d5511561b120f9407347f6700483a1a44542dc124ee290
SSDEEP

6144:5r469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fe:5r4iu6/eIo4Rsw33AtsmQ3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e12babbb10ac764028d587aef99c3912fe76063fa8e8c3f116002451004043d8
- Size
  
  327KB
- MD5
  
  7a52547052d9083c7cb853ff70db95e0
- SHA1
  
  76fb98dde7d9672aeccbd352543ded2a11de2000
- SHA256
  
  e12babbb10ac764028d587aef99c3912fe76063fa8e8c3f116002451004043d8
- SHA512
  
  6a1d903bcefdd7a2eb295f45fd8c31635280028dbe31587742fe415e2e5a5b139301ec0b29e9a77427d5511561b120f9407347f6700483a1a44542dc124ee290
- SSDEEP
  
  6144:5r469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fe:5r4iu6/eIo4Rsw33AtsmQ3
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2