1dbac17d24ce8ad88de6f684339792362245249db8fa62bcdfd3b2b0bd5d7613 | Triage

Sharing

General

Target

1dbac17d24ce8ad88de6f684339792362245249db8fa62bcdfd3b2b0bd5d7613
Size

304KB
Sample

221123-k1emsshh42
MD5

fa13e19a13e7948a53f338471ce6e6ea
SHA1

1cebcf8a9ccd20ecbdf2e25f555e1b550af3fb0e
SHA256

1dbac17d24ce8ad88de6f684339792362245249db8fa62bcdfd3b2b0bd5d7613
SHA512

c17ae9b6c62afa2f1fe5a1973e263d4ebb3fd8b1d071efd4f601d43059beca3328501e3d89c6e1d8dc4276477a9c86451e56f3fa26aa5814a6d51132d83f2c26
SSDEEP

6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPB:lrkuu6/eIo4tQW62T+uTwM6YVxm24B

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1dbac17d24ce8ad88de6f684339792362245249db8fa62bcdfd3b2b0bd5d7613
- Size
  
  304KB
- MD5
  
  fa13e19a13e7948a53f338471ce6e6ea
- SHA1
  
  1cebcf8a9ccd20ecbdf2e25f555e1b550af3fb0e
- SHA256
  
  1dbac17d24ce8ad88de6f684339792362245249db8fa62bcdfd3b2b0bd5d7613
- SHA512
  
  c17ae9b6c62afa2f1fe5a1973e263d4ebb3fd8b1d071efd4f601d43059beca3328501e3d89c6e1d8dc4276477a9c86451e56f3fa26aa5814a6d51132d83f2c26
- SSDEEP
  
  6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPB:lrkuu6/eIo4tQW62T+uTwM6YVxm24B
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2