35917099fb8716ce32f8fe78b250d7afa924625ac6970e4d9889a88b033f36eb | Triage

Sharing

General

Target

35917099fb8716ce32f8fe78b250d7afa924625ac6970e4d9889a88b033f36eb
Size

304KB
Sample

221206-ts74tadc49
MD5

898d922f61559dfc199ec0de1b8b62b1
SHA1

78a0c58649ea5b4d792150c221607c7e2e60a2cb
SHA256

35917099fb8716ce32f8fe78b250d7afa924625ac6970e4d9889a88b033f36eb
SHA512

32a02a9c5026eb4fcb0ea3595d13923312eebc09010df8b5dd6c934a93efc0014291fc554d2dbcc1c46e063e4d746be65e4636f607df36bf1787cbbe980dfdd1
SSDEEP

6144:vrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7Y:vrkX63yRl1uqM+gs+2RLTf+QLShvQx7Y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  35917099fb8716ce32f8fe78b250d7afa924625ac6970e4d9889a88b033f36eb
- Size
  
  304KB
- MD5
  
  898d922f61559dfc199ec0de1b8b62b1
- SHA1
  
  78a0c58649ea5b4d792150c221607c7e2e60a2cb
- SHA256
  
  35917099fb8716ce32f8fe78b250d7afa924625ac6970e4d9889a88b033f36eb
- SHA512
  
  32a02a9c5026eb4fcb0ea3595d13923312eebc09010df8b5dd6c934a93efc0014291fc554d2dbcc1c46e063e4d746be65e4636f607df36bf1787cbbe980dfdd1
- SSDEEP
  
  6144:vrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7Y:vrkX63yRl1uqM+gs+2RLTf+QLShvQx7Y
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2