0f41baf6d78c412bc60bd0f57ea6b3ba0cadcf553dafe895051700866db4ba47 | Triage

Sharing

General

Target

0f41baf6d78c412bc60bd0f57ea6b3ba0cadcf553dafe895051700866db4ba47
Size

304KB
Sample

221123-k1rblahh59
MD5

e6123cca2466d8fa18a7526f1d3b1e90
SHA1

1b281d2397bd4fff27e77ff995f4bdf30ffff5ee
SHA256

0f41baf6d78c412bc60bd0f57ea6b3ba0cadcf553dafe895051700866db4ba47
SHA512

3c6f43caac9e2fda8d0c118a5649f66e365415c0653e2df3404c790dced39bd4198ffff7f637a3db6498da1b8a600c1fefbde181d8c5495b34b80043b2a5dbe4
SSDEEP

6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPw:drkuu6/eIo4tQW62T+uTwM6YVxm24w

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0f41baf6d78c412bc60bd0f57ea6b3ba0cadcf553dafe895051700866db4ba47
- Size
  
  304KB
- MD5
  
  e6123cca2466d8fa18a7526f1d3b1e90
- SHA1
  
  1b281d2397bd4fff27e77ff995f4bdf30ffff5ee
- SHA256
  
  0f41baf6d78c412bc60bd0f57ea6b3ba0cadcf553dafe895051700866db4ba47
- SHA512
  
  3c6f43caac9e2fda8d0c118a5649f66e365415c0653e2df3404c790dced39bd4198ffff7f637a3db6498da1b8a600c1fefbde181d8c5495b34b80043b2a5dbe4
- SSDEEP
  
  6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPw:drkuu6/eIo4tQW62T+uTwM6YVxm24w
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2