9e4c6eac07d285a9f38cc5ff15506d063b7230525709ac9a6102d08deff198d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

full_install.exe
Size

50.8MB
Sample

240203-fgefgacacl
MD5

e4a5ec60021fb8adfb06abc8ac76c326
SHA1

759f0a6484ee677262d4f05aa7da3a7cee5e307f
SHA256

9e4c6eac07d285a9f38cc5ff15506d063b7230525709ac9a6102d08deff198d2
SHA512

d2d24016e46276ef426a43dba55b09082cbdba927aef4c9487a46b3cea7340ade31db1e81ef3d87993007c9f5e30457480c246893811ed2b6d8cefd696891946
SSDEEP

1572864:7nycgaBYdPYGfSx2xQbw8F6iJYw6PNVpmKGQ3:LzIPYEyMa6wL6PNVErY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Device/HarddiskVolume4/Accounts/Santosh JR PC Backup_June 2022/D Drive/Tally ERP9 v 1.52/full_install.exe
- Size
  
  51.6MB
- MD5
  
  0be7cea44b1357660ef4bcfefb59dc27
- SHA1
  
  bb8833c42430e3a617041a09f99115f3bff74825
- SHA256
  
  4320c085d6e7301b5fcb1a9a6d0e101ebf488efb364e4bae34688adeaa192c9b
- SHA512
  
  52396b56ad5f76e05a909155947e2ae6bb84c90d4f6941590be899d92ee9313e489fa59d42b443dfdfd6e1d9f2a107b25b541a77e25ea883ceaf98c23a379754
- SSDEEP
  
  1572864:uWE2hLeBRZurLHwoX69S0VBrrq6WDM8xog3ppvaiW/L:XhLiALHwo6YoBrGtXahL
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2