4b58c9773534a15020dac7f41d3369be0d3fd3b6dcff9adbb6f1e9faa6a69613 | Triage

Sharing

General

Target

4b58c9773534a15020dac7f41d3369be0d3fd3b6dcff9adbb6f1e9faa6a69613
Size

315KB
Sample

221123-kdcjxscc6w
MD5

ad16a3b7558336fea4e955878b00ca9c
SHA1

b20dcb9eee2c7303a72d20be4b13eda69f1d8e71
SHA256

4b58c9773534a15020dac7f41d3369be0d3fd3b6dcff9adbb6f1e9faa6a69613
SHA512

265a5b87f36f1fa19745403a9c3c0f28a2a2c41cd02580e84b0200f08d0c84b8e106173eb7ead126c33be5e27f0ff281c2de5590bba3b3b8ed30e533c6d4aa04
SSDEEP

6144:Mr4bUzkuvcBYC47l2x9bpAJiqS1JDoU0/JleWvJ6AbJbkvIxBu4Ti3iQa:Mr9kuveY3ImYZ15oU0/HtbJbkgXJGyQa

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4b58c9773534a15020dac7f41d3369be0d3fd3b6dcff9adbb6f1e9faa6a69613
- Size
  
  315KB
- MD5
  
  ad16a3b7558336fea4e955878b00ca9c
- SHA1
  
  b20dcb9eee2c7303a72d20be4b13eda69f1d8e71
- SHA256
  
  4b58c9773534a15020dac7f41d3369be0d3fd3b6dcff9adbb6f1e9faa6a69613
- SHA512
  
  265a5b87f36f1fa19745403a9c3c0f28a2a2c41cd02580e84b0200f08d0c84b8e106173eb7ead126c33be5e27f0ff281c2de5590bba3b3b8ed30e533c6d4aa04
- SSDEEP
  
  6144:Mr4bUzkuvcBYC47l2x9bpAJiqS1JDoU0/JleWvJ6AbJbkvIxBu4Ti3iQa:Mr9kuveY3ImYZ15oU0/HtbJbkgXJGyQa
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2