192585e290ee32502e2ed04563c794243af54a76c8ce18e2f81b4f24fa3d2e40 | Triage

Sharing

General

Target

192585e290ee32502e2ed04563c794243af54a76c8ce18e2f81b4f24fa3d2e40
Size

316KB
Sample

221123-knd6hacg3z
MD5

ced5751ef2f3a1e706be5a23276c494a
SHA1

874109148b8908fc523a98a1fb6d27d3ec8d8697
SHA256

192585e290ee32502e2ed04563c794243af54a76c8ce18e2f81b4f24fa3d2e40
SHA512

56949aac31f3373b0198aea2345f5f73191e1e6cb08ba4e523b336e2bf45cf482e0521e6942bb12a7a8cc819a25baa265b2b882d5c6f6e08e5d1ea9157e46f36
SSDEEP

6144:9rJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bS6:9r6kuveY3TT2XdGp9xRC4bS6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  192585e290ee32502e2ed04563c794243af54a76c8ce18e2f81b4f24fa3d2e40
- Size
  
  316KB
- MD5
  
  ced5751ef2f3a1e706be5a23276c494a
- SHA1
  
  874109148b8908fc523a98a1fb6d27d3ec8d8697
- SHA256
  
  192585e290ee32502e2ed04563c794243af54a76c8ce18e2f81b4f24fa3d2e40
- SHA512
  
  56949aac31f3373b0198aea2345f5f73191e1e6cb08ba4e523b336e2bf45cf482e0521e6942bb12a7a8cc819a25baa265b2b882d5c6f6e08e5d1ea9157e46f36
- SSDEEP
  
  6144:9rJbUzkuvcBYC47l2xuNfL2pAgWriSTb3Z9xuzSCR2bS6:9r6kuveY3TT2XdGp9xRC4bS6
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2