2252bf90bdfb8b4db970cc50cd234a2e116e93fd657cb8aeb39398065dae587b | Triage

Sharing

General

Target

39ca7695b476985c5f5aa90cfcef4608
Size

313KB
Sample

231231-rr89daeagq
MD5

39ca7695b476985c5f5aa90cfcef4608
SHA1

df8eacc0336ced46d4de1c4e5945f8edf42e83a4
SHA256

2252bf90bdfb8b4db970cc50cd234a2e116e93fd657cb8aeb39398065dae587b
SHA512

c563fb256f58d772e03ecdb50cdedd511c912ae0197b192ebe816283747c3bf13600d342b4a985477f3d42d7a583fc9b17f1bc8cb10d14a4aeee13d5bdf9fb25
SSDEEP

6144:wrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDc:wrfu6/eIo4jVW5soVCcQovoO0DJM+ED

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  39ca7695b476985c5f5aa90cfcef4608
- Size
  
  313KB
- MD5
  
  39ca7695b476985c5f5aa90cfcef4608
- SHA1
  
  df8eacc0336ced46d4de1c4e5945f8edf42e83a4
- SHA256
  
  2252bf90bdfb8b4db970cc50cd234a2e116e93fd657cb8aeb39398065dae587b
- SHA512
  
  c563fb256f58d772e03ecdb50cdedd511c912ae0197b192ebe816283747c3bf13600d342b4a985477f3d42d7a583fc9b17f1bc8cb10d14a4aeee13d5bdf9fb25
- SSDEEP
  
  6144:wrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDc:wrfu6/eIo4jVW5soVCcQovoO0DJM+ED
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2