20916e9bafdb6d5e5a919e9fd8fcf2e168b22a12837dc544bf43e7060dcf3544 | Triage

Sharing

General

Target

99f7ada73a4c4f1dac4fa96156dd344d
Size

326KB
Sample

240213-1gsnbaah64
MD5

99f7ada73a4c4f1dac4fa96156dd344d
SHA1

63389f9a650fbf7f1c9119c2a3f5485bb62c34f2
SHA256

20916e9bafdb6d5e5a919e9fd8fcf2e168b22a12837dc544bf43e7060dcf3544
SHA512

2f23fd67c0018f57f8ceeb09008b7f8de7d67673eedde253ce23f8fa7c944ff57ad47d70c2a3325e9e6437e54d798cb2d6bb8bb34354f30db3876dfff59355b2
SSDEEP

6144:6r4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clge:6r4gu6/eIo4nULZKMRwxuPfk6m

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  99f7ada73a4c4f1dac4fa96156dd344d
- Size
  
  326KB
- MD5
  
  99f7ada73a4c4f1dac4fa96156dd344d
- SHA1
  
  63389f9a650fbf7f1c9119c2a3f5485bb62c34f2
- SHA256
  
  20916e9bafdb6d5e5a919e9fd8fcf2e168b22a12837dc544bf43e7060dcf3544
- SHA512
  
  2f23fd67c0018f57f8ceeb09008b7f8de7d67673eedde253ce23f8fa7c944ff57ad47d70c2a3325e9e6437e54d798cb2d6bb8bb34354f30db3876dfff59355b2
- SSDEEP
  
  6144:6r4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clge:6r4gu6/eIo4nULZKMRwxuPfk6m
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2