517e7c3049681084a2994841bed166f2487cdc4890d3a9ddf46b473f1ee762cf | Triage

Sharing

General

Target

517e7c3049681084a2994841bed166f2487cdc4890d3a9ddf46b473f1ee762cf
Size

316KB
Sample

221123-kceynacc3x
MD5

fa91e0bb3640cfd7044d0b71ae3353fe
SHA1

053c23ca0d14c974cd05d947f871d127283a4ff5
SHA256

517e7c3049681084a2994841bed166f2487cdc4890d3a9ddf46b473f1ee762cf
SHA512

cc4c5dd2d500953dbc8a0dadf16f2443d2b840d7210201079dc130b1ceb826328503c7b73cc73bd3d850fa47be738c8d273d5b57a6595274381c7ecd263593b5
SSDEEP

6144:iribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xL:ir7kuveY33FJUo7MDkA6K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  517e7c3049681084a2994841bed166f2487cdc4890d3a9ddf46b473f1ee762cf
- Size
  
  316KB
- MD5
  
  fa91e0bb3640cfd7044d0b71ae3353fe
- SHA1
  
  053c23ca0d14c974cd05d947f871d127283a4ff5
- SHA256
  
  517e7c3049681084a2994841bed166f2487cdc4890d3a9ddf46b473f1ee762cf
- SHA512
  
  cc4c5dd2d500953dbc8a0dadf16f2443d2b840d7210201079dc130b1ceb826328503c7b73cc73bd3d850fa47be738c8d273d5b57a6595274381c7ecd263593b5
- SSDEEP
  
  6144:iribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xL:ir7kuveY33FJUo7MDkA6K
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2