5c1c6fc70194de2f0a3f34920a0a7affb3372e4041255033f564bdf0d9d03999 | Triage

Sharing

General

Target

5c1c6fc70194de2f0a3f34920a0a7affb3372e4041255033f564bdf0d9d03999
Size

313KB
Sample

221123-kahlrscb5w
MD5

ab3633416aabd728a5c18d59b2a54fb9
SHA1

40382c22cf308ef3c1cc6f74302990c271136175
SHA256

5c1c6fc70194de2f0a3f34920a0a7affb3372e4041255033f564bdf0d9d03999
SHA512

d803bb0c02d43d3318935ca56321dd03dda1e9b52812a6d9ede317e8b34545339936b090907b33c72c3a8a8649cc5002dae58ea5ee0e56b89011f51e3bf51e38
SSDEEP

6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYR:Ark4u6/eIo4nlu7trxFtApfgMyrpjYR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5c1c6fc70194de2f0a3f34920a0a7affb3372e4041255033f564bdf0d9d03999
- Size
  
  313KB
- MD5
  
  ab3633416aabd728a5c18d59b2a54fb9
- SHA1
  
  40382c22cf308ef3c1cc6f74302990c271136175
- SHA256
  
  5c1c6fc70194de2f0a3f34920a0a7affb3372e4041255033f564bdf0d9d03999
- SHA512
  
  d803bb0c02d43d3318935ca56321dd03dda1e9b52812a6d9ede317e8b34545339936b090907b33c72c3a8a8649cc5002dae58ea5ee0e56b89011f51e3bf51e38
- SSDEEP
  
  6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYR:Ark4u6/eIo4nlu7trxFtApfgMyrpjYR
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2