875144159d4ffe02b6e69d2bb42d9eeef8b32040c806a92649d6b32ab6137001 | Triage

Sharing

General

Target

875144159d4ffe02b6e69d2bb42d9eeef8b32040c806a92649d6b32ab6137001
Size

327KB
Sample

221123-j1x9gabf9t
MD5

a5406391172f0046566e7bfbd653f41f
SHA1

426c31afbfb99d91ead203c257cd557dad6f706b
SHA256

875144159d4ffe02b6e69d2bb42d9eeef8b32040c806a92649d6b32ab6137001
SHA512

6c4cf2bfa353d91e8b86bb6873b6085b00b4567a1919e981ed5399ba4dc52598a1f53a396885d5e954bf7f115d0c0f3f4446d35026a4fcdf77c4437c08406875
SSDEEP

6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fz:hr4iu6/eIo4Rsw33AtsmQ+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  875144159d4ffe02b6e69d2bb42d9eeef8b32040c806a92649d6b32ab6137001
- Size
  
  327KB
- MD5
  
  a5406391172f0046566e7bfbd653f41f
- SHA1
  
  426c31afbfb99d91ead203c257cd557dad6f706b
- SHA256
  
  875144159d4ffe02b6e69d2bb42d9eeef8b32040c806a92649d6b32ab6137001
- SHA512
  
  6c4cf2bfa353d91e8b86bb6873b6085b00b4567a1919e981ed5399ba4dc52598a1f53a396885d5e954bf7f115d0c0f3f4446d35026a4fcdf77c4437c08406875
- SSDEEP
  
  6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fz:hr4iu6/eIo4Rsw33AtsmQ+
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2