10efa199e5dbc16d4b0e93872cba8198a771ca01a0278244479fd61a7625a786 | Triage

Sharing

General

Target

10efa199e5dbc16d4b0e93872cba8198a771ca01a0278244479fd61a7625a786
Size

303KB
Sample

221206-t2xdnsea34
MD5

1a600e40810442490e9674e3f70d7161
SHA1

ae52cfd01477656e4b6e7d9f134ba68d3d73717f
SHA256

10efa199e5dbc16d4b0e93872cba8198a771ca01a0278244479fd61a7625a786
SHA512

eb4fbac1558bdc1ec427ece1a5628bb94f9e4605a5fe7d41c028ab33125d640f4c70887ca95cef5d7f627e2127ef17f59380eb038d2016c1d5a107bbd82a8d81
SSDEEP

6144:GrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7y:GrkX63yRl1uqM+gs+2RLTf+QLShvQx7y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  10efa199e5dbc16d4b0e93872cba8198a771ca01a0278244479fd61a7625a786
- Size
  
  303KB
- MD5
  
  1a600e40810442490e9674e3f70d7161
- SHA1
  
  ae52cfd01477656e4b6e7d9f134ba68d3d73717f
- SHA256
  
  10efa199e5dbc16d4b0e93872cba8198a771ca01a0278244479fd61a7625a786
- SHA512
  
  eb4fbac1558bdc1ec427ece1a5628bb94f9e4605a5fe7d41c028ab33125d640f4c70887ca95cef5d7f627e2127ef17f59380eb038d2016c1d5a107bbd82a8d81
- SSDEEP
  
  6144:GrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7y:GrkX63yRl1uqM+gs+2RLTf+QLShvQx7y
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2