81c91b534c08c58937b430f11b8914cd223913cb5aaaf901847a6c4ca7599896 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81c91b534c08c58937b430f11b8914cd223913cb5aaaf901847a6c4ca7599896
Size

311KB
Sample

221121-2t5n3sad72
MD5

3b0a7957029d7576e4c4ff6350317964
SHA1

178ce48644a79c020da9de984d3dc7648c6164a5
SHA256

81c91b534c08c58937b430f11b8914cd223913cb5aaaf901847a6c4ca7599896
SHA512

002819e73087fafac384513a9af97a0086570a8494ec82756ae3916807912b1098697322f01969908d53b25a37c6ff89321b4ff1b06497804bf9bf1cec5bb369
SSDEEP

6144:OrcbUzkuvcBYC47l2x6VhrsvjcGUk6u2EOhB6nzuY5M:OrhkuveY3bGkz6zuY5M

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  81c91b534c08c58937b430f11b8914cd223913cb5aaaf901847a6c4ca7599896
- Size
  
  311KB
- MD5
  
  3b0a7957029d7576e4c4ff6350317964
- SHA1
  
  178ce48644a79c020da9de984d3dc7648c6164a5
- SHA256
  
  81c91b534c08c58937b430f11b8914cd223913cb5aaaf901847a6c4ca7599896
- SHA512
  
  002819e73087fafac384513a9af97a0086570a8494ec82756ae3916807912b1098697322f01969908d53b25a37c6ff89321b4ff1b06497804bf9bf1cec5bb369
- SSDEEP
  
  6144:OrcbUzkuvcBYC47l2x6VhrsvjcGUk6u2EOhB6nzuY5M:OrhkuveY3bGkz6zuY5M
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2