c18b4761ba9056221870186a6a59dc989959ecc8f8a99892564512659a241a1a | Triage

Sharing

General

Target

c18b4761ba9056221870186a6a59dc989959ecc8f8a99892564512659a241a1a
Size

261KB
Sample

221029-syd79aceb2
MD5

fddf8a7c124c3a5e6384de64fd610c42
SHA1

50b2be2d391413ff02064d87a09962c39b0adf41
SHA256

c18b4761ba9056221870186a6a59dc989959ecc8f8a99892564512659a241a1a
SHA512

d222fa3e3801c4a24f92df11979f8a45d15760a64ca1bb2b332683dd1216f4709c61a073c63abba8ae49728f13de9e331fe0cb8a4743ceda4a1ea83d72b38982
SSDEEP

6144:pzvQ5oA1JQc91Wn/e9Lb6DFSxEY0tPTlCY3K:pzvQ91EW9wF7CY3K

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  c18b4761ba9056221870186a6a59dc989959ecc8f8a99892564512659a241a1a
- Size
  
  261KB
- MD5
  
  fddf8a7c124c3a5e6384de64fd610c42
- SHA1
  
  50b2be2d391413ff02064d87a09962c39b0adf41
- SHA256
  
  c18b4761ba9056221870186a6a59dc989959ecc8f8a99892564512659a241a1a
- SHA512
  
  d222fa3e3801c4a24f92df11979f8a45d15760a64ca1bb2b332683dd1216f4709c61a073c63abba8ae49728f13de9e331fe0cb8a4743ceda4a1ea83d72b38982
- SSDEEP
  
  6144:pzvQ5oA1JQc91Wn/e9Lb6DFSxEY0tPTlCY3K:pzvQ91EW9wF7CY3K
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2