1be21cf191d35d6907911c5fccba18944eed00b2a65538217822f90dc7a2f711 | Triage

Sharing

General

Target

1be21cf191d35d6907911c5fccba18944eed00b2a65538217822f90dc7a2f711
Size

313KB
Sample

221123-kmwzxshc75
MD5

dcd7a88f91d581b590c919a9999e2d9c
SHA1

d1299b1024ec962ed101b47470b5d55ea1770772
SHA256

1be21cf191d35d6907911c5fccba18944eed00b2a65538217822f90dc7a2f711
SHA512

64c979ca676e751d4a0b51e300c7711455ea4e75370a358507604565f40046ae44498c22491b2e300dc2fbfde598a9147f436ca66f84352bbf461888de55c51b
SSDEEP

6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijY5h:Ark4u6/eIo4nlu7trxFtApfgMyrpjY5h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1be21cf191d35d6907911c5fccba18944eed00b2a65538217822f90dc7a2f711
- Size
  
  313KB
- MD5
  
  dcd7a88f91d581b590c919a9999e2d9c
- SHA1
  
  d1299b1024ec962ed101b47470b5d55ea1770772
- SHA256
  
  1be21cf191d35d6907911c5fccba18944eed00b2a65538217822f90dc7a2f711
- SHA512
  
  64c979ca676e751d4a0b51e300c7711455ea4e75370a358507604565f40046ae44498c22491b2e300dc2fbfde598a9147f436ca66f84352bbf461888de55c51b
- SSDEEP
  
  6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijY5h:Ark4u6/eIo4nlu7trxFtApfgMyrpjY5h
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2