1b46fa2ea6b4b5c612ed8155178a7de37e413e1c98fc5c99955cf3f3d706c68c | Triage

Sharing

General

Target

1b46fa2ea6b4b5c612ed8155178a7de37e413e1c98fc5c99955cf3f3d706c68c
Size

313KB
Sample

221123-kmy5aahc77
MD5

a7b21a2139d2189e87fc7fc3e0c87ef6
SHA1

2fc94fc3b8c164005289f39a555dd6baa28a587a
SHA256

1b46fa2ea6b4b5c612ed8155178a7de37e413e1c98fc5c99955cf3f3d706c68c
SHA512

e6ecd654db3d440ebd68f1f3af970920566fc27fb73125f8b1e687d2e2109a5d15a895a5c81284171c000e7efe5be3aaf7314ffea8c4ea52edf82c9dd88431fc
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LR:3ryu6/eIo4vMResyEf0uP9d9UG0R

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1b46fa2ea6b4b5c612ed8155178a7de37e413e1c98fc5c99955cf3f3d706c68c
- Size
  
  313KB
- MD5
  
  a7b21a2139d2189e87fc7fc3e0c87ef6
- SHA1
  
  2fc94fc3b8c164005289f39a555dd6baa28a587a
- SHA256
  
  1b46fa2ea6b4b5c612ed8155178a7de37e413e1c98fc5c99955cf3f3d706c68c
- SHA512
  
  e6ecd654db3d440ebd68f1f3af970920566fc27fb73125f8b1e687d2e2109a5d15a895a5c81284171c000e7efe5be3aaf7314ffea8c4ea52edf82c9dd88431fc
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LR:3ryu6/eIo4vMResyEf0uP9d9UG0R
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2