2615163ec95f54f9d60fe7e9f3ed0f02edb267b2fdfefbdd01510036564c3f87 | Triage

Sharing

General

Target

2615163ec95f54f9d60fe7e9f3ed0f02edb267b2fdfefbdd01510036564c3f87
Size

313KB
Sample

221123-kkwldacf3v
MD5

c02b23bc1c37bae9247c759b33a63988
SHA1

ffb6c46c1e175854b577ae7282e2586223ab8e6b
SHA256

2615163ec95f54f9d60fe7e9f3ed0f02edb267b2fdfefbdd01510036564c3f87
SHA512

9605857e2638b8986bba2df9818c3ac5cbeef98488cf2c1907de028681f23fe776600e75d7d8dbf47f908ef97d4eed12e4f0386507f223bd37b9a22314b28408
SSDEEP

6144:frb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMO:frRu6/eIo4t3PuFITKUAt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2615163ec95f54f9d60fe7e9f3ed0f02edb267b2fdfefbdd01510036564c3f87
- Size
  
  313KB
- MD5
  
  c02b23bc1c37bae9247c759b33a63988
- SHA1
  
  ffb6c46c1e175854b577ae7282e2586223ab8e6b
- SHA256
  
  2615163ec95f54f9d60fe7e9f3ed0f02edb267b2fdfefbdd01510036564c3f87
- SHA512
  
  9605857e2638b8986bba2df9818c3ac5cbeef98488cf2c1907de028681f23fe776600e75d7d8dbf47f908ef97d4eed12e4f0386507f223bd37b9a22314b28408
- SSDEEP
  
  6144:frb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMO:frRu6/eIo4t3PuFITKUAt
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2