30278b1b299ea8eb3eadc31944564ae50aeaeaed5ae700301e634df4c162beed | Triage

Sharing

General

Target

30278b1b299ea8eb3eadc31944564ae50aeaeaed5ae700301e634df4c162beed
Size

313KB
Sample

221123-khsrpsce4s
MD5

a65297def733959afe2a534abdbb683e
SHA1

8912e9302b81c3b27da46034d2a4acd6db4c16df
SHA256

30278b1b299ea8eb3eadc31944564ae50aeaeaed5ae700301e634df4c162beed
SHA512

9c6b941e793628d6607e12f642befaf937493cf78f57a24040cea4845495718717035a9c9adc8d007b7daf469d63304c20fe7c25cc41b9785564c23a23bb2e82
SSDEEP

6144:lrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzU:lrfu6/eIo4XwlWKM231t5UnRr3DdRp5R

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  30278b1b299ea8eb3eadc31944564ae50aeaeaed5ae700301e634df4c162beed
- Size
  
  313KB
- MD5
  
  a65297def733959afe2a534abdbb683e
- SHA1
  
  8912e9302b81c3b27da46034d2a4acd6db4c16df
- SHA256
  
  30278b1b299ea8eb3eadc31944564ae50aeaeaed5ae700301e634df4c162beed
- SHA512
  
  9c6b941e793628d6607e12f642befaf937493cf78f57a24040cea4845495718717035a9c9adc8d007b7daf469d63304c20fe7c25cc41b9785564c23a23bb2e82
- SSDEEP
  
  6144:lrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzU:lrfu6/eIo4XwlWKM231t5UnRr3DdRp5R
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2