cd09a81538b1ae2166295b40057a8043bfbc9cd90f718ecc37f57e618fe466a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd09a81538b1ae2166295b40057a8043bfbc9cd90f718ecc37f57e618fe466a9
Size

316KB
Sample

221128-eh9gkada67
MD5

7b1d91c90300e7a0b689778f0297d9d3
SHA1

cd47455287fb7340cbf8dd0f81434f4315721c87
SHA256

cd09a81538b1ae2166295b40057a8043bfbc9cd90f718ecc37f57e618fe466a9
SHA512

43fe0355fd4ea326e8d7652777597030377ed7f93556b05ac428147c56f70a0f0f0bd2fe105f5e5ec3f433c31f3621ecd1bbf09c5662e56937314cd113974d2a
SSDEEP

6144:RrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVr:RrkkuveY3zhlV6tmDxzwVr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cd09a81538b1ae2166295b40057a8043bfbc9cd90f718ecc37f57e618fe466a9
- Size
  
  316KB
- MD5
  
  7b1d91c90300e7a0b689778f0297d9d3
- SHA1
  
  cd47455287fb7340cbf8dd0f81434f4315721c87
- SHA256
  
  cd09a81538b1ae2166295b40057a8043bfbc9cd90f718ecc37f57e618fe466a9
- SHA512
  
  43fe0355fd4ea326e8d7652777597030377ed7f93556b05ac428147c56f70a0f0f0bd2fe105f5e5ec3f433c31f3621ecd1bbf09c5662e56937314cd113974d2a
- SSDEEP
  
  6144:RrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVr:RrkkuveY3zhlV6tmDxzwVr
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2