16e25cff8cd9adfc1e85f1b3ee6f2409661af27fdd4096dbe1dc9025b6a5e7ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab704f1aa568b8f776093ebc11369ee3
Size

304KB
Sample

240228-j9vjyafc83
MD5

ab704f1aa568b8f776093ebc11369ee3
SHA1

6b062daedeab7191db65a54942937c50f52bc1d7
SHA256

16e25cff8cd9adfc1e85f1b3ee6f2409661af27fdd4096dbe1dc9025b6a5e7ed
SHA512

5e789a86e03eef34a0f82ed88a1e5a1487ab73bc76e4f1c9cf9b186b37a2331bb16c182a6ea4d756016cc13400c747e259260f28c82f3b0930b3977d7c37daef
SSDEEP

6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP9:lrkuu6/eIo4tQW62T+uTwM6YVxm249

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ab704f1aa568b8f776093ebc11369ee3
- Size
  
  304KB
- MD5
  
  ab704f1aa568b8f776093ebc11369ee3
- SHA1
  
  6b062daedeab7191db65a54942937c50f52bc1d7
- SHA256
  
  16e25cff8cd9adfc1e85f1b3ee6f2409661af27fdd4096dbe1dc9025b6a5e7ed
- SHA512
  
  5e789a86e03eef34a0f82ed88a1e5a1487ab73bc76e4f1c9cf9b186b37a2331bb16c182a6ea4d756016cc13400c747e259260f28c82f3b0930b3977d7c37daef
- SSDEEP
  
  6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP9:lrkuu6/eIo4tQW62T+uTwM6YVxm249
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2