17ff65afe426651578593f35dcdd53ac47cb31c4cb4979dd17c764b239a0fd52 | Triage

Sharing

General

Target

17ff65afe426651578593f35dcdd53ac47cb31c4cb4979dd17c764b239a0fd52
Size

325KB
Sample

221123-knk9tacg4x
MD5

9481dd58b0c4f7ec07e7f4023e236696
SHA1

af7f145d7e29473eee240b9f33ebf85d5b23c7dd
SHA256

17ff65afe426651578593f35dcdd53ac47cb31c4cb4979dd17c764b239a0fd52
SHA512

accb026efef9a4cbb6e7112e979460f195b5c982bc9d15778b5ac0bcc65fd4650e27ee859eee6a625360b99c2683666af0c54ed53fd0088b34ba29f6df1256ca
SSDEEP

6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oz:kr1B3u6/eIo4ArVUBQCCYOqmO5oz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  17ff65afe426651578593f35dcdd53ac47cb31c4cb4979dd17c764b239a0fd52
- Size
  
  325KB
- MD5
  
  9481dd58b0c4f7ec07e7f4023e236696
- SHA1
  
  af7f145d7e29473eee240b9f33ebf85d5b23c7dd
- SHA256
  
  17ff65afe426651578593f35dcdd53ac47cb31c4cb4979dd17c764b239a0fd52
- SHA512
  
  accb026efef9a4cbb6e7112e979460f195b5c982bc9d15778b5ac0bcc65fd4650e27ee859eee6a625360b99c2683666af0c54ed53fd0088b34ba29f6df1256ca
- SSDEEP
  
  6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oz:kr1B3u6/eIo4ArVUBQCCYOqmO5oz
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2