1c5e3b54040d18d0716f55e2aa55f026b85913e569cebd0ffe76f9d3b47a544a | Triage

Sharing

General

Target

1c5e3b54040d18d0716f55e2aa55f026b85913e569cebd0ffe76f9d3b47a544a
Size

313KB
Sample

221123-kmr1zahc68
MD5

9510af8eee0af8066e1f212e4dcc928f
SHA1

506612b3fdbf874d2e8dce62959dfa080c9f9c1a
SHA256

1c5e3b54040d18d0716f55e2aa55f026b85913e569cebd0ffe76f9d3b47a544a
SHA512

0111d6b1dfe26345e527d018e05a76d2a728a62e5fdb468dd76e32865c1d2001d3e3f767e98bf707a3cc449b8fd63c7a79dc433cfea9dfd3967483f8577d1dd7
SSDEEP

6144:nro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94do:nrAu6/eIo4s1yR9lsc/ado

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1c5e3b54040d18d0716f55e2aa55f026b85913e569cebd0ffe76f9d3b47a544a
- Size
  
  313KB
- MD5
  
  9510af8eee0af8066e1f212e4dcc928f
- SHA1
  
  506612b3fdbf874d2e8dce62959dfa080c9f9c1a
- SHA256
  
  1c5e3b54040d18d0716f55e2aa55f026b85913e569cebd0ffe76f9d3b47a544a
- SHA512
  
  0111d6b1dfe26345e527d018e05a76d2a728a62e5fdb468dd76e32865c1d2001d3e3f767e98bf707a3cc449b8fd63c7a79dc433cfea9dfd3967483f8577d1dd7
- SSDEEP
  
  6144:nro9uEo2S1YnQmCX492DkwNP3qpYFx1PKR9bwMHCrwqdS1D/9n1v94do:nrAu6/eIo4s1yR9lsc/ado
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2