1b1c5a7fe0fd3185ddbcf4e2ca60b9513c74c7b25eeb73c953518b13f6f32495 | Triage

Sharing

General

Target

1b1c5a7fe0fd3185ddbcf4e2ca60b9513c74c7b25eeb73c953518b13f6f32495
Size

318KB
Sample

221106-2qwa8sghgn
MD5

0f00637c4aa4f091e2a0fdfb34061534
SHA1

8af11e38ef75d9d3aa30fc8d5d383351893f1dd6
SHA256

1b1c5a7fe0fd3185ddbcf4e2ca60b9513c74c7b25eeb73c953518b13f6f32495
SHA512

8ab8bd3b84a68a7ae24474a7733360b3ee990ac827e4decb8075d800ccf5d43db2f60d001358c555b61bcb865fb53eb4fdd8096af16dc50381134e8a9dd31e60
SSDEEP

6144:En6qIYs1x+wxFjmf1fTc1u6QoCzbOn6Aij+tJTi91CuN:k6ss1xoo1uDvviBcCJTijPN

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  1b1c5a7fe0fd3185ddbcf4e2ca60b9513c74c7b25eeb73c953518b13f6f32495
- Size
  
  318KB
- MD5
  
  0f00637c4aa4f091e2a0fdfb34061534
- SHA1
  
  8af11e38ef75d9d3aa30fc8d5d383351893f1dd6
- SHA256
  
  1b1c5a7fe0fd3185ddbcf4e2ca60b9513c74c7b25eeb73c953518b13f6f32495
- SHA512
  
  8ab8bd3b84a68a7ae24474a7733360b3ee990ac827e4decb8075d800ccf5d43db2f60d001358c555b61bcb865fb53eb4fdd8096af16dc50381134e8a9dd31e60
- SSDEEP
  
  6144:En6qIYs1x+wxFjmf1fTc1u6QoCzbOn6Aij+tJTi91CuN:k6ss1xoo1uDvviBcCJTijPN
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2