91f1c5e2e1ac80d7f5b5ef17afffed6275e35863b30c8f80ef09cd8e24dff84d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91f1c5e2e1ac80d7f5b5ef17afffed6275e35863b30c8f80ef09cd8e24dff84d
Size

325KB
Sample

221019-r3125scfen
MD5

a249ad2cb74a77548412c188fb5f8b30
SHA1

3a47094d8da4ca40a72ace46df68df71dbcbae68
SHA256

91f1c5e2e1ac80d7f5b5ef17afffed6275e35863b30c8f80ef09cd8e24dff84d
SHA512

f8096cfaa036636d45ee49bb7c5199f9eaa712d59d76c9d07b86294c0f9dbe7a822b2cc0b6f17410b0486a61c98a903c7238b26f28bae0e2f6c3187c9c1cbcce
SSDEEP

6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oZ:cr1B3u6/eIo4ArVUBQCCYOqmO5oZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  91f1c5e2e1ac80d7f5b5ef17afffed6275e35863b30c8f80ef09cd8e24dff84d
- Size
  
  325KB
- MD5
  
  a249ad2cb74a77548412c188fb5f8b30
- SHA1
  
  3a47094d8da4ca40a72ace46df68df71dbcbae68
- SHA256
  
  91f1c5e2e1ac80d7f5b5ef17afffed6275e35863b30c8f80ef09cd8e24dff84d
- SHA512
  
  f8096cfaa036636d45ee49bb7c5199f9eaa712d59d76c9d07b86294c0f9dbe7a822b2cc0b6f17410b0486a61c98a903c7238b26f28bae0e2f6c3187c9c1cbcce
- SSDEEP
  
  6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oZ:cr1B3u6/eIo4ArVUBQCCYOqmO5oZ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2