19f1a0eebd11c2677809750a9de625f3d52450ca9631293196e993e6e1b56e54 | Triage

Sharing

General

Target

19f1a0eebd11c2677809750a9de625f3d52450ca9631293196e993e6e1b56e54
Size

313KB
Sample

221123-km7fnacg3t
MD5

ada38c8f1875d17653a456adbfaa58e4
SHA1

f7ef4d0fa90f3497b7a641d24ab2f9169cc0a9be
SHA256

19f1a0eebd11c2677809750a9de625f3d52450ca9631293196e993e6e1b56e54
SHA512

31a9f95265488490dd0f2dd64662453110b08682265fda65bf7b043abcaf3ff585da2d659cb220bd6d0bf2af81fa1208bb9f4cc3bab6810e81e547603484e58a
SSDEEP

6144:wrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDh:wrfu6/eIo4jVW5soVCcQovoO0DJM+Ei

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  19f1a0eebd11c2677809750a9de625f3d52450ca9631293196e993e6e1b56e54
- Size
  
  313KB
- MD5
  
  ada38c8f1875d17653a456adbfaa58e4
- SHA1
  
  f7ef4d0fa90f3497b7a641d24ab2f9169cc0a9be
- SHA256
  
  19f1a0eebd11c2677809750a9de625f3d52450ca9631293196e993e6e1b56e54
- SHA512
  
  31a9f95265488490dd0f2dd64662453110b08682265fda65bf7b043abcaf3ff585da2d659cb220bd6d0bf2af81fa1208bb9f4cc3bab6810e81e547603484e58a
- SSDEEP
  
  6144:wrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDh:wrfu6/eIo4jVW5soVCcQovoO0DJM+Ei
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2