6186bceab28f5c3b6a1198f775f9cc9810ce2b1228296776b32c8a5d370bd6c4 | Triage

Sharing

General

Target

6186bceab28f5c3b6a1198f775f9cc9810ce2b1228296776b32c8a5d370bd6c4
Size

325KB
Sample

221123-j9gyvagf88
MD5

c19cd9ec2c312ca2df9b583e36171dd1
SHA1

7f36bfc5d2e532323d6aa853162033c47edb42bc
SHA256

6186bceab28f5c3b6a1198f775f9cc9810ce2b1228296776b32c8a5d370bd6c4
SHA512

e24d71eee0578b456c5cbca3bf186a3c80d20b4d4db901fee0b293cb8674b179c0574e605e54d9c0ecf44bc5d2cce7304c87b7297ee9341b3360cc99cf23a040
SSDEEP

6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oq:kr1B3u6/eIo4ArVUBQCCYOqmO5oq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6186bceab28f5c3b6a1198f775f9cc9810ce2b1228296776b32c8a5d370bd6c4
- Size
  
  325KB
- MD5
  
  c19cd9ec2c312ca2df9b583e36171dd1
- SHA1
  
  7f36bfc5d2e532323d6aa853162033c47edb42bc
- SHA256
  
  6186bceab28f5c3b6a1198f775f9cc9810ce2b1228296776b32c8a5d370bd6c4
- SHA512
  
  e24d71eee0578b456c5cbca3bf186a3c80d20b4d4db901fee0b293cb8674b179c0574e605e54d9c0ecf44bc5d2cce7304c87b7297ee9341b3360cc99cf23a040
- SSDEEP
  
  6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oq:kr1B3u6/eIo4ArVUBQCCYOqmO5oq
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2