16ef636a5e172db0d646e343e93deb1bfcfcc3f4bc30bdab0b22b311071b4cc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ef636a5e172db0d646e343e93deb1bfcfcc3f4bc30bdab0b22b311071b4cc1
Size

317KB
Sample

221002-zmkzzsabh7
MD5

702f186b8f4dd56c0829ffa9036f49e5
SHA1

7caecba8b14ff8f69ad9b4a54b899db7638edd51
SHA256

16ef636a5e172db0d646e343e93deb1bfcfcc3f4bc30bdab0b22b311071b4cc1
SHA512

d39b3d034557c38e24c4ca1fe8931af9a0e06a6948807f08eac7f471d2abb708bb1f035513317eda5ff16d1c0e65669e95a6241ce1c2e8562ae6a319a28bcb6d
SSDEEP

6144:dMXYS2YxK9kFVKv94DPPKm37H6HfliaKl6xqht9+uQPm:d8gF9kFUvWDam37aHDKlbb9uPm

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  16ef636a5e172db0d646e343e93deb1bfcfcc3f4bc30bdab0b22b311071b4cc1
- Size
  
  317KB
- MD5
  
  702f186b8f4dd56c0829ffa9036f49e5
- SHA1
  
  7caecba8b14ff8f69ad9b4a54b899db7638edd51
- SHA256
  
  16ef636a5e172db0d646e343e93deb1bfcfcc3f4bc30bdab0b22b311071b4cc1
- SHA512
  
  d39b3d034557c38e24c4ca1fe8931af9a0e06a6948807f08eac7f471d2abb708bb1f035513317eda5ff16d1c0e65669e95a6241ce1c2e8562ae6a319a28bcb6d
- SSDEEP
  
  6144:dMXYS2YxK9kFVKv94DPPKm37H6HfliaKl6xqht9+uQPm:d8gF9kFUvWDam37aHDKlbb9uPm
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2