ad1a41ef2ac1310da1580abd404cd7db1f1a838386f103950353ae33751418bc | Triage

Sharing

General

Target

ad1a41ef2ac1310da1580abd404cd7db1f1a838386f103950353ae33751418bc
Size

313KB
Sample

221128-gctj9seb3t
MD5

4e84db704f7274edb17fc6b04cd522de
SHA1

7939eeee9811faf9ffd5d451f8c17b55cce9a333
SHA256

ad1a41ef2ac1310da1580abd404cd7db1f1a838386f103950353ae33751418bc
SHA512

498c1e5db18308b799ed5aa74ed71c022a16de85754bc7a406da6f8e0fe45a4138e43505d8f26648768ea2b994cee054f0372384b7c620e7e63f051377c29d8d
SSDEEP

6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LH:/ryu6/eIo4vMResyEf0uP9d9UG0H

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ad1a41ef2ac1310da1580abd404cd7db1f1a838386f103950353ae33751418bc
- Size
  
  313KB
- MD5
  
  4e84db704f7274edb17fc6b04cd522de
- SHA1
  
  7939eeee9811faf9ffd5d451f8c17b55cce9a333
- SHA256
  
  ad1a41ef2ac1310da1580abd404cd7db1f1a838386f103950353ae33751418bc
- SHA512
  
  498c1e5db18308b799ed5aa74ed71c022a16de85754bc7a406da6f8e0fe45a4138e43505d8f26648768ea2b994cee054f0372384b7c620e7e63f051377c29d8d
- SSDEEP
  
  6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LH:/ryu6/eIo4vMResyEf0uP9d9UG0H
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2