413cec87a598df6247c442b928d553fdb17493512dd035ecef2ca30a6157533b | Triage

Sharing

General

Target

413cec87a598df6247c442b928d553fdb17493512dd035ecef2ca30a6157533b
Size

313KB
Sample

221123-ke26zaha32
MD5

9898627129974b121ee0e5d0232e4aa7
SHA1

4063ed66b43db754997ab34db7c7587dea4b4e75
SHA256

413cec87a598df6247c442b928d553fdb17493512dd035ecef2ca30a6157533b
SHA512

5c9ec38ca990ac425071b066e49d76bd60e44017ddc07d534910e2691bce82802f29db39df221331738991af51de65c8165eca72548855422cec154a2b2950d6
SSDEEP

6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYY:4rk4u6/eIo4nlu7trxFtApfgMyrpjYY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  413cec87a598df6247c442b928d553fdb17493512dd035ecef2ca30a6157533b
- Size
  
  313KB
- MD5
  
  9898627129974b121ee0e5d0232e4aa7
- SHA1
  
  4063ed66b43db754997ab34db7c7587dea4b4e75
- SHA256
  
  413cec87a598df6247c442b928d553fdb17493512dd035ecef2ca30a6157533b
- SHA512
  
  5c9ec38ca990ac425071b066e49d76bd60e44017ddc07d534910e2691bce82802f29db39df221331738991af51de65c8165eca72548855422cec154a2b2950d6
- SSDEEP
  
  6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYY:4rk4u6/eIo4nlu7trxFtApfgMyrpjYY
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2