e56af0fe01834fd6c75200ddd87d4f6ef7e1d32a97d6f329bf2dbd25410c65dd | Triage

Sharing

General

Target

e56af0fe01834fd6c75200ddd87d4f6ef7e1d32a97d6f329bf2dbd25410c65dd.dll
Size

3.3MB
Sample

240603-rd6akaac74
MD5

ec203098f0e1d9ab5db48e0b73ced3f7
SHA1

80588a32e25db376f6f8132826e147c89185981c
SHA256

e56af0fe01834fd6c75200ddd87d4f6ef7e1d32a97d6f329bf2dbd25410c65dd
SHA512

cdd2ab19c6c8e762502a6dcae5bea0d2c039bf9ec86fa9caf0cb8cda5049e9347d6eae99171d32096781e78c260f5295b87abc0ac527126258a04237a190fc12
SSDEEP

98304:sKwKFd1dlcfQ8JJUomw7GQu8R9lhpN7X3eHv:p1aJUeBtH7X6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e56af0fe01834fd6c75200ddd87d4f6ef7e1d32a97d6f329bf2dbd25410c65dd.dll
- Size
  
  3.3MB
- MD5
  
  ec203098f0e1d9ab5db48e0b73ced3f7
- SHA1
  
  80588a32e25db376f6f8132826e147c89185981c
- SHA256
  
  e56af0fe01834fd6c75200ddd87d4f6ef7e1d32a97d6f329bf2dbd25410c65dd
- SHA512
  
  cdd2ab19c6c8e762502a6dcae5bea0d2c039bf9ec86fa9caf0cb8cda5049e9347d6eae99171d32096781e78c260f5295b87abc0ac527126258a04237a190fc12
- SSDEEP
  
  98304:sKwKFd1dlcfQ8JJUomw7GQu8R9lhpN7X3eHv:p1aJUeBtH7X6
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2