5cd0aacec1e326bc7f9a17b9aa464cdefb0b5f0e4c8abcb747099d59c388e291 | Triage

Sharing

General

Target

5cd0aacec1e326bc7f9a17b9aa464cdefb0b5f0e4c8abcb747099d59c388e291
Size

325KB
Sample

221123-kaevwacb5s
MD5

bf96c676fdb397c4daaa1989e92b6357
SHA1

a2d53f2069c2faf7e31c0e38226fb525ca34f297
SHA256

5cd0aacec1e326bc7f9a17b9aa464cdefb0b5f0e4c8abcb747099d59c388e291
SHA512

cb07426610e86a283a77b77391df85cd31c5034897cf16caf75fd89a9ba28fe317683b893ba33e906c83ebd9237bc64f1a2bbdcd6a81b9970d9654a0330101e8
SSDEEP

6144:Ur1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ok:Ur1B3u6/eIo4ArVUBQCCYOqmO5ok

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5cd0aacec1e326bc7f9a17b9aa464cdefb0b5f0e4c8abcb747099d59c388e291
- Size
  
  325KB
- MD5
  
  bf96c676fdb397c4daaa1989e92b6357
- SHA1
  
  a2d53f2069c2faf7e31c0e38226fb525ca34f297
- SHA256
  
  5cd0aacec1e326bc7f9a17b9aa464cdefb0b5f0e4c8abcb747099d59c388e291
- SHA512
  
  cb07426610e86a283a77b77391df85cd31c5034897cf16caf75fd89a9ba28fe317683b893ba33e906c83ebd9237bc64f1a2bbdcd6a81b9970d9654a0330101e8
- SSDEEP
  
  6144:Ur1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ok:Ur1B3u6/eIo4ArVUBQCCYOqmO5ok
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2