23177ffe469f106e8f6ed2321849f919295637a384c81a4d28e9927b255083b5 | Triage

Sharing

General

Target

23177ffe469f106e8f6ed2321849f919295637a384c81a4d28e9927b255083b5
Size

325KB
Sample

221123-klhqxacf5w
MD5

bd68c5d4de8a0316349859765cb946c3
SHA1

3b7e1c5b2de0e9c1119527d8c3af6bf26fe42f5e
SHA256

23177ffe469f106e8f6ed2321849f919295637a384c81a4d28e9927b255083b5
SHA512

1f28cc21c43b1cae146d03077c7e3a3f93b853ccdb364c3178b52754dc03a04fb7c10cfbe2c41b1228004b7547228c745113d221cdceb4e80534ca51fbd584a9
SSDEEP

6144:Qr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ov:Qr1B3u6/eIo4ArVUBQCCYOqmO5ov

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  23177ffe469f106e8f6ed2321849f919295637a384c81a4d28e9927b255083b5
- Size
  
  325KB
- MD5
  
  bd68c5d4de8a0316349859765cb946c3
- SHA1
  
  3b7e1c5b2de0e9c1119527d8c3af6bf26fe42f5e
- SHA256
  
  23177ffe469f106e8f6ed2321849f919295637a384c81a4d28e9927b255083b5
- SHA512
  
  1f28cc21c43b1cae146d03077c7e3a3f93b853ccdb364c3178b52754dc03a04fb7c10cfbe2c41b1228004b7547228c745113d221cdceb4e80534ca51fbd584a9
- SSDEEP
  
  6144:Qr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ov:Qr1B3u6/eIo4ArVUBQCCYOqmO5ov
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2