c38658cfdd03c98e92a0d69c12a560936de74ac42d878e49dd21f44a9e38465f | Triage

Sharing

General

Target

c38658cfdd03c98e92a0d69c12a560936de74ac42d878e49dd21f44a9e38465f
Size

313KB
Sample

221123-jgjxqsah4x
MD5

a7a25651dbd339a4d94e364df4632571
SHA1

4fa1d7e6eb732b55f70ee93acad0ca9ef28e7221
SHA256

c38658cfdd03c98e92a0d69c12a560936de74ac42d878e49dd21f44a9e38465f
SHA512

f890c7e9688f7e20ecb5386a737211fae794ab26c16138080f43e98e7a821bd1321d1933e2fda27571ba9c6feb45b1de3149c38e8091ba8312646af547eda18b
SSDEEP

6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYQ:Ark4u6/eIo4nlu7trxFtApfgMyrpjYQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c38658cfdd03c98e92a0d69c12a560936de74ac42d878e49dd21f44a9e38465f
- Size
  
  313KB
- MD5
  
  a7a25651dbd339a4d94e364df4632571
- SHA1
  
  4fa1d7e6eb732b55f70ee93acad0ca9ef28e7221
- SHA256
  
  c38658cfdd03c98e92a0d69c12a560936de74ac42d878e49dd21f44a9e38465f
- SHA512
  
  f890c7e9688f7e20ecb5386a737211fae794ab26c16138080f43e98e7a821bd1321d1933e2fda27571ba9c6feb45b1de3149c38e8091ba8312646af547eda18b
- SSDEEP
  
  6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYQ:Ark4u6/eIo4nlu7trxFtApfgMyrpjYQ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2