c502957187d11cf38241710edbbd19aad4ea6aa806b33ad9c6e9e17ed20cb918 | Triage

Sharing

General

Target

c502957187d11cf38241710edbbd19aad4ea6aa806b33ad9c6e9e17ed20cb918
Size

316KB
Sample

221123-jfl1psah2w
MD5

fc7d06bed064fcfedc40f6220cb8c02c
SHA1

99f4e399d29a3d350a2b8ef9536baa3073ec4d2b
SHA256

c502957187d11cf38241710edbbd19aad4ea6aa806b33ad9c6e9e17ed20cb918
SHA512

a416a907c34570465e9edb0671bdc591c4c5da82c7f58cc4cacb04107a49e9ada2cd8cc01be28770aef6697eeb800eccb15f9c1f39f60e0b9e92ccbd0004a84e
SSDEEP

6144:drybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phob:drLkuveY3EMK9ObxD/06s5w3BLb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c502957187d11cf38241710edbbd19aad4ea6aa806b33ad9c6e9e17ed20cb918
- Size
  
  316KB
- MD5
  
  fc7d06bed064fcfedc40f6220cb8c02c
- SHA1
  
  99f4e399d29a3d350a2b8ef9536baa3073ec4d2b
- SHA256
  
  c502957187d11cf38241710edbbd19aad4ea6aa806b33ad9c6e9e17ed20cb918
- SHA512
  
  a416a907c34570465e9edb0671bdc591c4c5da82c7f58cc4cacb04107a49e9ada2cd8cc01be28770aef6697eeb800eccb15f9c1f39f60e0b9e92ccbd0004a84e
- SSDEEP
  
  6144:drybUzkuvcBYC47l2xphuK2+Otbaysqo+/VKitoTxwbs5iD3B2phob:drLkuveY3EMK9ObxD/06s5w3BLb
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2