decec541ef9fdeb9d839a542bc8b8075ab552359939d58a1ca89ab24e3b0d666 | Triage

Sharing

General

Target

decec541ef9fdeb9d839a542bc8b8075ab552359939d58a1ca89ab24e3b0d666
Size

52KB
Sample

221204-reqlhafa36
MD5

3c3cd44a5262ee6dd9bdcb6b2a40fea4
SHA1

44614c224f6dc8467f19f96ba3a23afe3e5f6bc3
SHA256

decec541ef9fdeb9d839a542bc8b8075ab552359939d58a1ca89ab24e3b0d666
SHA512

3a96482d3432bde68c511b8c92bc68004ed1d490223df43b7dca81982588b79fc02b035246eb534af643dddbc3fcf18f6f293e7720f26392a5c2bcd41639f3f8
SSDEEP

768:POTTM/gKgNZTvswRS2GKYNyxiDrNnTGE/rAqRfNV/chySmqzlrJ:POTTMNCzQnSk5niETvRlNglN

Score

6^/10

collection discovery

Malware Config

Targets

- Target
  
  decec541ef9fdeb9d839a542bc8b8075ab552359939d58a1ca89ab24e3b0d666
- Size
  
  52KB
- MD5
  
  3c3cd44a5262ee6dd9bdcb6b2a40fea4
- SHA1
  
  44614c224f6dc8467f19f96ba3a23afe3e5f6bc3
- SHA256
  
  decec541ef9fdeb9d839a542bc8b8075ab552359939d58a1ca89ab24e3b0d666
- SHA512
  
  3a96482d3432bde68c511b8c92bc68004ed1d490223df43b7dca81982588b79fc02b035246eb534af643dddbc3fcf18f6f293e7720f26392a5c2bcd41639f3f8
- SSDEEP
  
  768:POTTM/gKgNZTvswRS2GKYNyxiDrNnTGE/rAqRfNV/chySmqzlrJ:POTTMNCzQnSk5niETvRlNglN
Score

6^/10

collection discovery
- Accesses Microsoft Outlook profiles
  collection
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscovery

behavioral2