General

  • Target

    17db1ee1fd3ce205ea05e7c2eae55570f7c1459cb5462a4a0c620712dec43952

  • Size

    313KB

  • Sample

    221123-knmgwahd23

  • MD5

    b45de765154c2f3e14b90d0bc09eddf0

  • SHA1

    b034695faf6ed50a7e876212538d6140bea23e39

  • SHA256

    17db1ee1fd3ce205ea05e7c2eae55570f7c1459cb5462a4a0c620712dec43952

  • SHA512

    3f82a705e0bbe307d87753fcabdf3d901040288dfc9485e5f573a659453d03f97dfc7098dfc6550d6d64b0fba93676cb0977afbfc400c7a000c5f43c9ca3498f

  • SSDEEP

    6144:ArJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDE:Arfu6/eIo4jVW5soVCcQovoO0DJM+ED

Score
7/10

Malware Config

Targets

    • Target

      17db1ee1fd3ce205ea05e7c2eae55570f7c1459cb5462a4a0c620712dec43952

    • Size

      313KB

    • MD5

      b45de765154c2f3e14b90d0bc09eddf0

    • SHA1

      b034695faf6ed50a7e876212538d6140bea23e39

    • SHA256

      17db1ee1fd3ce205ea05e7c2eae55570f7c1459cb5462a4a0c620712dec43952

    • SHA512

      3f82a705e0bbe307d87753fcabdf3d901040288dfc9485e5f573a659453d03f97dfc7098dfc6550d6d64b0fba93676cb0977afbfc400c7a000c5f43c9ca3498f

    • SSDEEP

      6144:ArJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDE:Arfu6/eIo4jVW5soVCcQovoO0DJM+ED

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks