3615b5bc2bd282bdcef4dfa6068c18b5f5e93187aaa44a311d219ff86ab4d711 | Triage

Sharing

General

Target

3615b5bc2bd282bdcef4dfa6068c18b5f5e93187aaa44a311d219ff86ab4d711
Size

327KB
Sample

221123-kgwrzaha95
MD5

d91eee64a829e096b7f158596c4e37f7
SHA1

6cc9de2c84f9a0a8367f22491a94c74f62603557
SHA256

3615b5bc2bd282bdcef4dfa6068c18b5f5e93187aaa44a311d219ff86ab4d711
SHA512

abec538fa8c235d014e3e46ae33281945a22cbab1f3f9dfaec0614aa55804a7fbd9553a87f99180d385626a374d8e0c859a8c974f7f273aedd3ad6869168ccd2
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FU:Zr4iu6/eIo4Rsw33AtsmQd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3615b5bc2bd282bdcef4dfa6068c18b5f5e93187aaa44a311d219ff86ab4d711
- Size
  
  327KB
- MD5
  
  d91eee64a829e096b7f158596c4e37f7
- SHA1
  
  6cc9de2c84f9a0a8367f22491a94c74f62603557
- SHA256
  
  3615b5bc2bd282bdcef4dfa6068c18b5f5e93187aaa44a311d219ff86ab4d711
- SHA512
  
  abec538fa8c235d014e3e46ae33281945a22cbab1f3f9dfaec0614aa55804a7fbd9553a87f99180d385626a374d8e0c859a8c974f7f273aedd3ad6869168ccd2
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FU:Zr4iu6/eIo4Rsw33AtsmQd
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2