217b0d4fec35423b29dc449cb4acb2037d3debc44801f671279ddaf97b9dce06 | Triage

Sharing

General

Target

217b0d4fec35423b29dc449cb4acb2037d3debc44801f671279ddaf97b9dce06
Size

304KB
Sample

221123-k1bwxadc4x
MD5

fdbf2169ee392021464a06954df78634
SHA1

c01b6ba09f286b6ed6b7d92df9e666a2af10cf0c
SHA256

217b0d4fec35423b29dc449cb4acb2037d3debc44801f671279ddaf97b9dce06
SHA512

db3b380379d4fdfc1102db532c9cbe5b60cf216ad36eff827dab153498bda157242a70b979f00a6ac1fd0478034c86aeba39b2062fcba01443a14cd2f5313ef3
SSDEEP

6144:1rkx9uEo2S1YnQmCX492DkwNP3qpYFkXdlP5IO5/OoCVHuy6SHZ86riVZkiizA:1rkHu6/eIo4RXdrIO5/OpVHd6Ky6rizx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  217b0d4fec35423b29dc449cb4acb2037d3debc44801f671279ddaf97b9dce06
- Size
  
  304KB
- MD5
  
  fdbf2169ee392021464a06954df78634
- SHA1
  
  c01b6ba09f286b6ed6b7d92df9e666a2af10cf0c
- SHA256
  
  217b0d4fec35423b29dc449cb4acb2037d3debc44801f671279ddaf97b9dce06
- SHA512
  
  db3b380379d4fdfc1102db532c9cbe5b60cf216ad36eff827dab153498bda157242a70b979f00a6ac1fd0478034c86aeba39b2062fcba01443a14cd2f5313ef3
- SSDEEP
  
  6144:1rkx9uEo2S1YnQmCX492DkwNP3qpYFkXdlP5IO5/OoCVHuy6SHZ86riVZkiizA:1rkHu6/eIo4RXdrIO5/OpVHd6Ky6rizx
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2