130e6304e91a59b7b8f508137d257383f27eb6c692122b74599141ca7a2051c9 | Triage

Sharing

General

Target

130e6304e91a59b7b8f508137d257383f27eb6c692122b74599141ca7a2051c9
Size

304KB
Sample

221123-k1nkpshh55
MD5

d9994724ad254ac51c61b04d29555cdf
SHA1

71f3dd1304bfb5665ff7f9c931fb756733951468
SHA256

130e6304e91a59b7b8f508137d257383f27eb6c692122b74599141ca7a2051c9
SHA512

96fabe79697b229c05482f1108563c76fa0d0b23afa6a8509a5aa43c6b90fb2f92f3d58ab45a9ae641dac6b85b0615c529dcc7fd757b84423acc861ffb565dd3
SSDEEP

6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPF:drkuu6/eIo4tQW62T+uTwM6YVxm24F

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  130e6304e91a59b7b8f508137d257383f27eb6c692122b74599141ca7a2051c9
- Size
  
  304KB
- MD5
  
  d9994724ad254ac51c61b04d29555cdf
- SHA1
  
  71f3dd1304bfb5665ff7f9c931fb756733951468
- SHA256
  
  130e6304e91a59b7b8f508137d257383f27eb6c692122b74599141ca7a2051c9
- SHA512
  
  96fabe79697b229c05482f1108563c76fa0d0b23afa6a8509a5aa43c6b90fb2f92f3d58ab45a9ae641dac6b85b0615c529dcc7fd757b84423acc861ffb565dd3
- SSDEEP
  
  6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPF:drkuu6/eIo4tQW62T+uTwM6YVxm24F
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2