91491f7f04394caa02b8beb50d6483f7033a6eb4d8d871e9ed6e50aaf03e7399 | Triage

Sharing

General

Target

91491f7f04394caa02b8beb50d6483f7033a6eb4d8d871e9ed6e50aaf03e7399
Size

325KB
Sample

221123-jy491abf2t
MD5

edcf905bf0ddba40bb0a9bd3c92267c5
SHA1

5371ed0efbdeeef98597cdced15c76b535c547cc
SHA256

91491f7f04394caa02b8beb50d6483f7033a6eb4d8d871e9ed6e50aaf03e7399
SHA512

d3723428b6665228540c6fdbf66d1877ad77663f03d3d98774533c99640b711365cca7d44ab888ad6d3026ee6c357968448b5e6c11ad49ecee5d3498d8787a11
SSDEEP

6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oi:kr1B3u6/eIo4ArVUBQCCYOqmO5oi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  91491f7f04394caa02b8beb50d6483f7033a6eb4d8d871e9ed6e50aaf03e7399
- Size
  
  325KB
- MD5
  
  edcf905bf0ddba40bb0a9bd3c92267c5
- SHA1
  
  5371ed0efbdeeef98597cdced15c76b535c547cc
- SHA256
  
  91491f7f04394caa02b8beb50d6483f7033a6eb4d8d871e9ed6e50aaf03e7399
- SHA512
  
  d3723428b6665228540c6fdbf66d1877ad77663f03d3d98774533c99640b711365cca7d44ab888ad6d3026ee6c357968448b5e6c11ad49ecee5d3498d8787a11
- SSDEEP
  
  6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oi:kr1B3u6/eIo4ArVUBQCCYOqmO5oi
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2