5d485417b96932a7d1eba6e9c2ce23175fa9613c4f9ca4bed13393fdbad6ee23 | Triage

Sharing

General

Target

5d485417b96932a7d1eba6e9c2ce23175fa9613c4f9ca4bed13393fdbad6ee23
Size

313KB
Sample

221123-kaceragg33
MD5

aaf53c3ada1888ecd73eaf581623d24f
SHA1

f157e41d06ea1e71afc70be750cfed724a67ef74
SHA256

5d485417b96932a7d1eba6e9c2ce23175fa9613c4f9ca4bed13393fdbad6ee23
SHA512

89bf853f686089c86d743a107b03f48d575087dcda24a54c074bf11f1fd6cea13f1ce49cf2781dcf94c0ee735715b7dc84be85a70ed9964db791eb72eb4d3a05
SSDEEP

6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYM:4rk4u6/eIo4nlu7trxFtApfgMyrpjYM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5d485417b96932a7d1eba6e9c2ce23175fa9613c4f9ca4bed13393fdbad6ee23
- Size
  
  313KB
- MD5
  
  aaf53c3ada1888ecd73eaf581623d24f
- SHA1
  
  f157e41d06ea1e71afc70be750cfed724a67ef74
- SHA256
  
  5d485417b96932a7d1eba6e9c2ce23175fa9613c4f9ca4bed13393fdbad6ee23
- SHA512
  
  89bf853f686089c86d743a107b03f48d575087dcda24a54c074bf11f1fd6cea13f1ce49cf2781dcf94c0ee735715b7dc84be85a70ed9964db791eb72eb4d3a05
- SSDEEP
  
  6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYM:4rk4u6/eIo4nlu7trxFtApfgMyrpjYM
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2