1e007188c040872bc5497a00756c41e60f357002498f5e8ba4a5532cec250159 | Triage

Sharing

General

Target

1e007188c040872bc5497a00756c41e60f357002498f5e8ba4a5532cec250159
Size

313KB
Sample

221123-kmfmyahc62
MD5

b56f41baa930927fcdc0e842e74c9d0a
SHA1

2a3c1031f05de67775f4c85e9c76bf715f99535d
SHA256

1e007188c040872bc5497a00756c41e60f357002498f5e8ba4a5532cec250159
SHA512

5f1b28bd7115e453c186508936bd696881c1a75f5bd500ce3e497467b08e712beacc625f632167e6e664a508a49f576ddd10e26dead8f9d24801061a0c6e7a74
SSDEEP

6144:Zrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM0:ZrRu6/eIo4t3PuFITKUAL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1e007188c040872bc5497a00756c41e60f357002498f5e8ba4a5532cec250159
- Size
  
  313KB
- MD5
  
  b56f41baa930927fcdc0e842e74c9d0a
- SHA1
  
  2a3c1031f05de67775f4c85e9c76bf715f99535d
- SHA256
  
  1e007188c040872bc5497a00756c41e60f357002498f5e8ba4a5532cec250159
- SHA512
  
  5f1b28bd7115e453c186508936bd696881c1a75f5bd500ce3e497467b08e712beacc625f632167e6e664a508a49f576ddd10e26dead8f9d24801061a0c6e7a74
- SSDEEP
  
  6144:Zrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM0:ZrRu6/eIo4t3PuFITKUAL
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2