2f513ae5153809c4556819e2f860231b98ed17e186b2829a00cde38a1c6c56db | Triage

Sharing

General

Target

2f513ae5153809c4556819e2f860231b98ed17e186b2829a00cde38a1c6c56db
Size

327KB
Sample

221123-khzv1sce41
MD5

b28ec8322b85e02e9be4c710e4b71e67
SHA1

2269b63ac3bc6e9ce5b1599185032f8b29d65074
SHA256

2f513ae5153809c4556819e2f860231b98ed17e186b2829a00cde38a1c6c56db
SHA512

5fd7cc0ff3d43d6f1a266ccc7664ae58e9599610afcac279928c737c14f245b417fae5d15fd01a8a7d505f172474ae6caaba4675d7e223b53fa78d4d6a44f1bb
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FI:Jr4iu6/eIo4Rsw33AtsmQt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2f513ae5153809c4556819e2f860231b98ed17e186b2829a00cde38a1c6c56db
- Size
  
  327KB
- MD5
  
  b28ec8322b85e02e9be4c710e4b71e67
- SHA1
  
  2269b63ac3bc6e9ce5b1599185032f8b29d65074
- SHA256
  
  2f513ae5153809c4556819e2f860231b98ed17e186b2829a00cde38a1c6c56db
- SHA512
  
  5fd7cc0ff3d43d6f1a266ccc7664ae58e9599610afcac279928c737c14f245b417fae5d15fd01a8a7d505f172474ae6caaba4675d7e223b53fa78d4d6a44f1bb
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FI:Jr4iu6/eIo4Rsw33AtsmQt
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2