3572c7930f2d608bb769af4da2431c60192a454c1e25ee953ae252bcb834c699 | Triage

Sharing

General

Target

3572c7930f2d608bb769af4da2431c60192a454c1e25ee953ae252bcb834c699
Size

313KB
Sample

221123-kg1e6acd9t
MD5

9bfcfca3b34edd74e256430f7c344afc
SHA1

ab3afdbecadf8c52ca81572e47213e6f13b9f16b
SHA256

3572c7930f2d608bb769af4da2431c60192a454c1e25ee953ae252bcb834c699
SHA512

cd999ea7b838da205ca5e593772c1e1c52230c33c4528bc5fde19edcb388c75a7c483702f71656f45e3b80a46aed47b74a5221c861b2d34b937865369c28158e
SSDEEP

6144:frK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lr:fryu6/eIo4vMResyEf0uP9d9UG0r

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3572c7930f2d608bb769af4da2431c60192a454c1e25ee953ae252bcb834c699
- Size
  
  313KB
- MD5
  
  9bfcfca3b34edd74e256430f7c344afc
- SHA1
  
  ab3afdbecadf8c52ca81572e47213e6f13b9f16b
- SHA256
  
  3572c7930f2d608bb769af4da2431c60192a454c1e25ee953ae252bcb834c699
- SHA512
  
  cd999ea7b838da205ca5e593772c1e1c52230c33c4528bc5fde19edcb388c75a7c483702f71656f45e3b80a46aed47b74a5221c861b2d34b937865369c28158e
- SSDEEP
  
  6144:frK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lr:fryu6/eIo4vMResyEf0uP9d9UG0r
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2