23a9885af539e22905891963d07006d71c837c61e87d37189c1f9da0354b5980 | Triage

Sharing

General

Target

23a9885af539e22905891963d07006d71c837c61e87d37189c1f9da0354b5980
Size

325KB
Sample

221123-klez1scf41
MD5

9b1b77d95b0343c71d55310922f7ee05
SHA1

6ddb97c535f954f176fce131b5d64733f7130065
SHA256

23a9885af539e22905891963d07006d71c837c61e87d37189c1f9da0354b5980
SHA512

e807d3f8d97d5b614cade5d3c813285b013b12512b820a7bdb24899f3ca07ea784baa2b66c4f0318f27b7f64776cf44051f634733790a108a2db87ad0714a685
SSDEEP

6144:sr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oy:sr1B3u6/eIo4ArVUBQCCYOqmO5oy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  23a9885af539e22905891963d07006d71c837c61e87d37189c1f9da0354b5980
- Size
  
  325KB
- MD5
  
  9b1b77d95b0343c71d55310922f7ee05
- SHA1
  
  6ddb97c535f954f176fce131b5d64733f7130065
- SHA256
  
  23a9885af539e22905891963d07006d71c837c61e87d37189c1f9da0354b5980
- SHA512
  
  e807d3f8d97d5b614cade5d3c813285b013b12512b820a7bdb24899f3ca07ea784baa2b66c4f0318f27b7f64776cf44051f634733790a108a2db87ad0714a685
- SSDEEP
  
  6144:sr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oy:sr1B3u6/eIo4ArVUBQCCYOqmO5oy
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2