907a1a5f0b55363bb0f4fcccffe91bba05b04915cc3838208a2b4d3cf34b875f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

907a1a5f0b55363bb0f4fcccffe91bba05b04915cc3838208a2b4d3cf34b875f
Size

234KB
Sample

221204-b1j3vaaf6y
MD5

16841c8088dc2694312eec2ce77594ec
SHA1

bd4104090b76577e330f2a5da2792d6e8e0d0959
SHA256

907a1a5f0b55363bb0f4fcccffe91bba05b04915cc3838208a2b4d3cf34b875f
SHA512

36597d597cf6354d3d64628d3629cfe9526f0e8cef577501a2dce632b69a3452b22d60b2257a0df28dd29125dce334e7578526fa128a3686f10e177184346d9e
SSDEEP

3072:ri/wft5Q7ydtJj5PFyt60FQVTfGLMmZiCOhrGLUgLFwM7IId6ILCv+ue4msc3BxB:dt5QkJtD0qVSRgCO1GPhwM7xd6IZT3G0

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  907a1a5f0b55363bb0f4fcccffe91bba05b04915cc3838208a2b4d3cf34b875f
- Size
  
  234KB
- MD5
  
  16841c8088dc2694312eec2ce77594ec
- SHA1
  
  bd4104090b76577e330f2a5da2792d6e8e0d0959
- SHA256
  
  907a1a5f0b55363bb0f4fcccffe91bba05b04915cc3838208a2b4d3cf34b875f
- SHA512
  
  36597d597cf6354d3d64628d3629cfe9526f0e8cef577501a2dce632b69a3452b22d60b2257a0df28dd29125dce334e7578526fa128a3686f10e177184346d9e
- SSDEEP
  
  3072:ri/wft5Q7ydtJj5PFyt60FQVTfGLMmZiCOhrGLUgLFwM7IId6ILCv+ue4msc3BxB:dt5QkJtD0qVSRgCO1GPhwM7xd6IZT3G0
Score

8^/10

discovery
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2