1ca461ae044d19f97811c7029e99e5f491a25d35102b90ba7181c419a374cd88 | Triage

Sharing

General

Target

1ca461ae044d19f97811c7029e99e5f491a25d35102b90ba7181c419a374cd88
Size

316KB
Sample

221123-kmnnjscf91
MD5

e6181c2f2cf41392cc8ec0c5cc2d5e0e
SHA1

285e2c078f78e04a42ddf87007ed43d44d62b73c
SHA256

1ca461ae044d19f97811c7029e99e5f491a25d35102b90ba7181c419a374cd88
SHA512

8f1c6b9c8602a40184ca4f832f19a67457bcc583b8bf229e4ed3d440e5f617f8100e83705d2d6cf66e182fa94db03fa9960f349391ad3b83b1f07af3355b17ba
SSDEEP

6144:frFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMP:fr2kuveY3ZF31N4XxZjP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1ca461ae044d19f97811c7029e99e5f491a25d35102b90ba7181c419a374cd88
- Size
  
  316KB
- MD5
  
  e6181c2f2cf41392cc8ec0c5cc2d5e0e
- SHA1
  
  285e2c078f78e04a42ddf87007ed43d44d62b73c
- SHA256
  
  1ca461ae044d19f97811c7029e99e5f491a25d35102b90ba7181c419a374cd88
- SHA512
  
  8f1c6b9c8602a40184ca4f832f19a67457bcc583b8bf229e4ed3d440e5f617f8100e83705d2d6cf66e182fa94db03fa9960f349391ad3b83b1f07af3355b17ba
- SSDEEP
  
  6144:frFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMP:fr2kuveY3ZF31N4XxZjP
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2