36826da6d128df1c67a07fadb71209d864e0caf385fad742591d1e1e93fa77b4 | Triage

Sharing

General

Target

36826da6d128df1c67a07fadb71209d864e0caf385fad742591d1e1e93fa77b4
Size

325KB
Sample

221123-kgtmlsha93
MD5

add4e938d8bde13dadb13d5bdb62a9c8
SHA1

180f0713482b7453305e6a3ba01cd3f0d9f9956b
SHA256

36826da6d128df1c67a07fadb71209d864e0caf385fad742591d1e1e93fa77b4
SHA512

feb4133ae9dc568eb6a88833a5d6a275a58595dd83434705e8ef2ca4fc623c77d75ada8dbbb9e99b4ba3146856eb62a2fd962144ca3204ac706392514c66d72b
SSDEEP

6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oE:0r1B3u6/eIo4ArVUBQCCYOqmO5oE

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  36826da6d128df1c67a07fadb71209d864e0caf385fad742591d1e1e93fa77b4
- Size
  
  325KB
- MD5
  
  add4e938d8bde13dadb13d5bdb62a9c8
- SHA1
  
  180f0713482b7453305e6a3ba01cd3f0d9f9956b
- SHA256
  
  36826da6d128df1c67a07fadb71209d864e0caf385fad742591d1e1e93fa77b4
- SHA512
  
  feb4133ae9dc568eb6a88833a5d6a275a58595dd83434705e8ef2ca4fc623c77d75ada8dbbb9e99b4ba3146856eb62a2fd962144ca3204ac706392514c66d72b
- SSDEEP
  
  6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oE:0r1B3u6/eIo4ArVUBQCCYOqmO5oE
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2