ddb30e5f4cb48b19af265f4716d908d099e5841b88d529686d636276cbe68f43 | Triage

Sharing

General

Target

ddb30e5f4cb48b19af265f4716d908d099e5841b88d529686d636276cbe68f43
Size

303KB
Sample

221206-ssqzvsab83
MD5

e2b0db9c45eb02f0fb9a0c44dba7cc65
SHA1

f309796789bfe05edcf98fba1a11b63bb1350f2e
SHA256

ddb30e5f4cb48b19af265f4716d908d099e5841b88d529686d636276cbe68f43
SHA512

4f81e0f39db819518e166e4f97d5565639c58134aa9359df35d1771084538e1dad3e3c783fc7e373107df0895c34589635f079d5e253bfae5c012439daadf22f
SSDEEP

6144:MrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7N:MrkX63yRl1uqM+gs+2RLTf+QLShvQx7N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ddb30e5f4cb48b19af265f4716d908d099e5841b88d529686d636276cbe68f43
- Size
  
  303KB
- MD5
  
  e2b0db9c45eb02f0fb9a0c44dba7cc65
- SHA1
  
  f309796789bfe05edcf98fba1a11b63bb1350f2e
- SHA256
  
  ddb30e5f4cb48b19af265f4716d908d099e5841b88d529686d636276cbe68f43
- SHA512
  
  4f81e0f39db819518e166e4f97d5565639c58134aa9359df35d1771084538e1dad3e3c783fc7e373107df0895c34589635f079d5e253bfae5c012439daadf22f
- SSDEEP
  
  6144:MrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7N:MrkX63yRl1uqM+gs+2RLTf+QLShvQx7N
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2