2d12c4d7e7dd13a4ea12f695e3e53ed5f747beba751a07469a73af122034671c | Triage

Sharing

General

Target

2d12c4d7e7dd13a4ea12f695e3e53ed5f747beba751a07469a73af122034671c
Size

313KB
Sample

221123-kjelgahb55
MD5

c3b5a8e8022ca4dbcc79c4661965ff90
SHA1

8457e9cc5f6b2d84fdb7afa4aeaf0552ade794ff
SHA256

2d12c4d7e7dd13a4ea12f695e3e53ed5f747beba751a07469a73af122034671c
SHA512

2682563771ff85f6cb62c2a5d4471b9635fcff05c31f1fed60b8818387e248b7926290f79f20c6dce365936ec465b01712da75488813b10f854c300cf6b8656b
SSDEEP

6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LV:/ryu6/eIo4vMResyEf0uP9d9UG0V

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2d12c4d7e7dd13a4ea12f695e3e53ed5f747beba751a07469a73af122034671c
- Size
  
  313KB
- MD5
  
  c3b5a8e8022ca4dbcc79c4661965ff90
- SHA1
  
  8457e9cc5f6b2d84fdb7afa4aeaf0552ade794ff
- SHA256
  
  2d12c4d7e7dd13a4ea12f695e3e53ed5f747beba751a07469a73af122034671c
- SHA512
  
  2682563771ff85f6cb62c2a5d4471b9635fcff05c31f1fed60b8818387e248b7926290f79f20c6dce365936ec465b01712da75488813b10f854c300cf6b8656b
- SSDEEP
  
  6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LV:/ryu6/eIo4vMResyEf0uP9d9UG0V
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2