4de98034e03090efc31057312ca6b4bcfe1215b6998f591f3d1e77615fc4fb87 | Triage

Sharing

General

Target

4de98034e03090efc31057312ca6b4bcfe1215b6998f591f3d1e77615fc4fb87
Size

327KB
Sample

221123-kcrx8acc4x
MD5

cdcfe3248cc1fadf1ecab4b541a8b0e2
SHA1

6e400176e7eb45abfde6d2cc6a6666692870a82a
SHA256

4de98034e03090efc31057312ca6b4bcfe1215b6998f591f3d1e77615fc4fb87
SHA512

d58cf142fc266039c44f10c56e5abe05812f01485ddf795404dfd12685f0ea3832e1cee0bbcf1e4f201717a47f1136f9c98b70022d155f11d57f236ea01ee8fb
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FK:Zr4iu6/eIo4Rsw33AtsmQ/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4de98034e03090efc31057312ca6b4bcfe1215b6998f591f3d1e77615fc4fb87
- Size
  
  327KB
- MD5
  
  cdcfe3248cc1fadf1ecab4b541a8b0e2
- SHA1
  
  6e400176e7eb45abfde6d2cc6a6666692870a82a
- SHA256
  
  4de98034e03090efc31057312ca6b4bcfe1215b6998f591f3d1e77615fc4fb87
- SHA512
  
  d58cf142fc266039c44f10c56e5abe05812f01485ddf795404dfd12685f0ea3832e1cee0bbcf1e4f201717a47f1136f9c98b70022d155f11d57f236ea01ee8fb
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FK:Zr4iu6/eIo4Rsw33AtsmQ/
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2