5c42727c9c325500d2e276fb9f3dc45387311f2ceae78fafaf710de822bcd285 | Triage

Sharing

General

Target

5c42727c9c325500d2e276fb9f3dc45387311f2ceae78fafaf710de822bcd285
Size

314KB
Sample

221123-kagz8sgg35
MD5

bca539b2f5b998b9ec0fd4803fd2d161
SHA1

c1adcccc090a01800fd6ecbae67ca65d8dbb6893
SHA256

5c42727c9c325500d2e276fb9f3dc45387311f2ceae78fafaf710de822bcd285
SHA512

127df0ff4023f1fe30c337e593d772ff9d6982651a6524da495a6a97f87284fe8feff8719802ea383586503d1a31f837b7728a3c64c10a882ce55eec42a1b574
SSDEEP

6144:yr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtL:yrqkuveY3RnV6c800oIpbv0SVtL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5c42727c9c325500d2e276fb9f3dc45387311f2ceae78fafaf710de822bcd285
- Size
  
  314KB
- MD5
  
  bca539b2f5b998b9ec0fd4803fd2d161
- SHA1
  
  c1adcccc090a01800fd6ecbae67ca65d8dbb6893
- SHA256
  
  5c42727c9c325500d2e276fb9f3dc45387311f2ceae78fafaf710de822bcd285
- SHA512
  
  127df0ff4023f1fe30c337e593d772ff9d6982651a6524da495a6a97f87284fe8feff8719802ea383586503d1a31f837b7728a3c64c10a882ce55eec42a1b574
- SSDEEP
  
  6144:yr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtL:yrqkuveY3RnV6c800oIpbv0SVtL
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2