52398d30d814afc72eb93a8a02e33f1babfa47b3425cb400473f2bcbc2209815 | Triage

Sharing

General

Target

52398d30d814afc72eb93a8a02e33f1babfa47b3425cb400473f2bcbc2209815
Size

314KB
Sample

221123-kcanyacc21
MD5

da93532d0e494258ffcb16cf32e94d5f
SHA1

0ebea959f4f2fd09496c423c2029424a97a557be
SHA256

52398d30d814afc72eb93a8a02e33f1babfa47b3425cb400473f2bcbc2209815
SHA512

6a1dc30d1ddd43a53e04e39ab0f187fd46f8f68d690b2ee678f1c83a94aa8f3317b4d477cf97dd04b723b858aa49ac821ab59ec2cd23f40969e048819b3bb92d
SSDEEP

6144:4rAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwJ:4r1kuveY35YO67Wxz7wJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  52398d30d814afc72eb93a8a02e33f1babfa47b3425cb400473f2bcbc2209815
- Size
  
  314KB
- MD5
  
  da93532d0e494258ffcb16cf32e94d5f
- SHA1
  
  0ebea959f4f2fd09496c423c2029424a97a557be
- SHA256
  
  52398d30d814afc72eb93a8a02e33f1babfa47b3425cb400473f2bcbc2209815
- SHA512
  
  6a1dc30d1ddd43a53e04e39ab0f187fd46f8f68d690b2ee678f1c83a94aa8f3317b4d477cf97dd04b723b858aa49ac821ab59ec2cd23f40969e048819b3bb92d
- SSDEEP
  
  6144:4rAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwJ:4r1kuveY35YO67Wxz7wJ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2