16832b9206dd3b7a39074957628bd1dc05e7b8dc122f12bd18f5697d3831ebe0 | Triage

Sharing

General

Target

16832b9206dd3b7a39074957628bd1dc05e7b8dc122f12bd18f5697d3831ebe0
Size

314KB
Sample

221123-knyj5scg5x
MD5

c690e6050e5cb31b87e48b91e341ba90
SHA1

00cd085d79b6160d587aee2e97a91e1f4b1cb65f
SHA256

16832b9206dd3b7a39074957628bd1dc05e7b8dc122f12bd18f5697d3831ebe0
SHA512

343c99950799fad8c41ea80e3d72359045f8f741a66e95bb5c90ce45e2383ab34ca566decb44ddc5466b90f39d6b4d305cd755f24cee7d105d6ea11e3c16b84b
SSDEEP

6144:wrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwj:wr1kuveY35YO67Wxz7wj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  16832b9206dd3b7a39074957628bd1dc05e7b8dc122f12bd18f5697d3831ebe0
- Size
  
  314KB
- MD5
  
  c690e6050e5cb31b87e48b91e341ba90
- SHA1
  
  00cd085d79b6160d587aee2e97a91e1f4b1cb65f
- SHA256
  
  16832b9206dd3b7a39074957628bd1dc05e7b8dc122f12bd18f5697d3831ebe0
- SHA512
  
  343c99950799fad8c41ea80e3d72359045f8f741a66e95bb5c90ce45e2383ab34ca566decb44ddc5466b90f39d6b4d305cd755f24cee7d105d6ea11e3c16b84b
- SSDEEP
  
  6144:wrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwj:wr1kuveY35YO67Wxz7wj
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2