c1963e813d73f725ed91b5f9138b73084de5e43f147f03896f82b5a79324e0ef | Triage

Sharing

General

Target

c1963e813d73f725ed91b5f9138b73084de5e43f147f03896f82b5a79324e0ef
Size

316KB
Sample

221123-jhez6sfe67
MD5

d4ed1013d4cd699fb2d46e92eda8b022
SHA1

264fcf362666501c2e20d82054b715ee77c655c9
SHA256

c1963e813d73f725ed91b5f9138b73084de5e43f147f03896f82b5a79324e0ef
SHA512

6fc33fbde4e6c1ab2a32a85ddc9cc6a412016d1b763a48c115cd3180b5f60c2b55636b8ddcdfc4066507abf7d227ed836b335044d3ba99bd912158908bf64f23
SSDEEP

6144:br/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYM:br0kuveY3cY1cia66MGd0Vs9BdNr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c1963e813d73f725ed91b5f9138b73084de5e43f147f03896f82b5a79324e0ef
- Size
  
  316KB
- MD5
  
  d4ed1013d4cd699fb2d46e92eda8b022
- SHA1
  
  264fcf362666501c2e20d82054b715ee77c655c9
- SHA256
  
  c1963e813d73f725ed91b5f9138b73084de5e43f147f03896f82b5a79324e0ef
- SHA512
  
  6fc33fbde4e6c1ab2a32a85ddc9cc6a412016d1b763a48c115cd3180b5f60c2b55636b8ddcdfc4066507abf7d227ed836b335044d3ba99bd912158908bf64f23
- SSDEEP
  
  6144:br/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYM:br0kuveY3cY1cia66MGd0Vs9BdNr
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2