bf68efa25180618b48e12b86f37c9c7d6416f57b83d3b92463db41510ba34e57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

full_install.exe
Size

50.8MB
Sample

240203-hl7c6adhbn
MD5

0c6d5e66ca2ad6decb393e1ce2e27b2b
SHA1

aba1d6f289c4655203e0dd232e2578bb4587172e
SHA256

bf68efa25180618b48e12b86f37c9c7d6416f57b83d3b92463db41510ba34e57
SHA512

3dc7c5c7d26fec443e05b0d72380400d13c41c680f0469569eccae84bcc32959f1020dbb0800c862189314ae39ced7f061908eec1218635cb50045357daae32c
SSDEEP

786432:V20/yv4+UKqND6c55r9ssfb9SYpiLYMCpSwPgbWH27Rpw0lqBVfUbPrkF:7/ydqNOCp2sfkhRqtPg62Tw0lCVqrkF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Device/HarddiskVolume4/Accounts/Accounts SAJAN/Sajan Laptop files/E Drive/Tally ERP9 v 1.52/full_install.exe
- Size
  
  51.6MB
- MD5
  
  0be7cea44b1357660ef4bcfefb59dc27
- SHA1
  
  bb8833c42430e3a617041a09f99115f3bff74825
- SHA256
  
  4320c085d6e7301b5fcb1a9a6d0e101ebf488efb364e4bae34688adeaa192c9b
- SHA512
  
  52396b56ad5f76e05a909155947e2ae6bb84c90d4f6941590be899d92ee9313e489fa59d42b443dfdfd6e1d9f2a107b25b541a77e25ea883ceaf98c23a379754
- SSDEEP
  
  1572864:uWE2hLeBRZurLHwoX69S0VBrrq6WDM8xog3ppvaiW/L:XhLiALHwo6YoBrGtXahL
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2