General

  • Target

    422e9a73f12598677002775e4561f74e0e9fb1991ca924cb167bd1c77241d7f6

  • Size

    313KB

  • Sample

    221123-kexlgsha28

  • MD5

    aaeeb693dfd64ba360b9ecfe4e2fbd76

  • SHA1

    de26e5d92a0e3ca8873acb5b87c8f6ea2277fe90

  • SHA256

    422e9a73f12598677002775e4561f74e0e9fb1991ca924cb167bd1c77241d7f6

  • SHA512

    02c4f3199b27bf1f992172ce747a252535e677e2ca7b1ad4fa2ddf20ee57a4210b9157bce56377f32fdecb0bd51f2766fb86fbb5804c7f8945ab58160bf12262

  • SSDEEP

    6144:grkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYL:grk4u6/eIo4nlu7trxFtApfgMyrpjYL

Score
7/10

Malware Config

Targets

    • Target

      422e9a73f12598677002775e4561f74e0e9fb1991ca924cb167bd1c77241d7f6

    • Size

      313KB

    • MD5

      aaeeb693dfd64ba360b9ecfe4e2fbd76

    • SHA1

      de26e5d92a0e3ca8873acb5b87c8f6ea2277fe90

    • SHA256

      422e9a73f12598677002775e4561f74e0e9fb1991ca924cb167bd1c77241d7f6

    • SHA512

      02c4f3199b27bf1f992172ce747a252535e677e2ca7b1ad4fa2ddf20ee57a4210b9157bce56377f32fdecb0bd51f2766fb86fbb5804c7f8945ab58160bf12262

    • SSDEEP

      6144:grkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYL:grk4u6/eIo4nlu7trxFtApfgMyrpjYL

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks