1632c95412a2fd6931bd8d37415f0785876be879996cc0f570547e0857b0c6a7 | Triage

Sharing

General

Target

1632c95412a2fd6931bd8d37415f0785876be879996cc0f570547e0857b0c6a7
Size

313KB
Sample

221123-knzr7scg5z
MD5

a56610f08abf72fa5678f27987d11c1d
SHA1

ee191f323f07f2633187d17656d46f0e427d7bf7
SHA256

1632c95412a2fd6931bd8d37415f0785876be879996cc0f570547e0857b0c6a7
SHA512

1109e8d2208564a9414968411308566b61f30273dc8632ef8b653332e70bde57405a622833c15dc19f27244c89cf978542efd604910e0bc6e265609adce8ee11
SSDEEP

6144:PrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L0:Pryu6/eIo4vMResyEf0uP9d9UG00

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1632c95412a2fd6931bd8d37415f0785876be879996cc0f570547e0857b0c6a7
- Size
  
  313KB
- MD5
  
  a56610f08abf72fa5678f27987d11c1d
- SHA1
  
  ee191f323f07f2633187d17656d46f0e427d7bf7
- SHA256
  
  1632c95412a2fd6931bd8d37415f0785876be879996cc0f570547e0857b0c6a7
- SHA512
  
  1109e8d2208564a9414968411308566b61f30273dc8632ef8b653332e70bde57405a622833c15dc19f27244c89cf978542efd604910e0bc6e265609adce8ee11
- SSDEEP
  
  6144:PrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L0:Pryu6/eIo4vMResyEf0uP9d9UG00
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2