522bd8d586cdacd79701204f36e9f14e344f270556e17143b39463fdc3ba42cc | Triage

Sharing

General

Target

522bd8d586cdacd79701204f36e9f14e344f270556e17143b39463fdc3ba42cc
Size

325KB
Sample

221123-kcc43agh26
MD5

beea5b9450844adb7da68d812a9f145f
SHA1

d77a083ee8d758db4e5bcb686590f365dfea0693
SHA256

522bd8d586cdacd79701204f36e9f14e344f270556e17143b39463fdc3ba42cc
SHA512

2c5ae6af4200ca25058ebc136e1ec796354264a5cdfcd98fdd001712f8de5a06ebdf29d99b6743c39516158fcc315147f1948edeb5d78745c381fb7daab64510
SSDEEP

6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oU:0r1B3u6/eIo4ArVUBQCCYOqmO5oU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  522bd8d586cdacd79701204f36e9f14e344f270556e17143b39463fdc3ba42cc
- Size
  
  325KB
- MD5
  
  beea5b9450844adb7da68d812a9f145f
- SHA1
  
  d77a083ee8d758db4e5bcb686590f365dfea0693
- SHA256
  
  522bd8d586cdacd79701204f36e9f14e344f270556e17143b39463fdc3ba42cc
- SHA512
  
  2c5ae6af4200ca25058ebc136e1ec796354264a5cdfcd98fdd001712f8de5a06ebdf29d99b6743c39516158fcc315147f1948edeb5d78745c381fb7daab64510
- SSDEEP
  
  6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oU:0r1B3u6/eIo4ArVUBQCCYOqmO5oU
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2