0d2c5f16fc085212c8b04c191cf0b9e336d854161b9a1e9872ceeaf3dfd84ed4 | Triage

Sharing

General

Target

0d2c5f16fc085212c8b04c191cf0b9e336d854161b9a1e9872ceeaf3dfd84ed4
Size

327KB
Sample

221123-kqlncshd89
MD5

afa50fe2a951b071f7aa231638c37f86
SHA1

fe06d0da0c08e6ac1348ee58e11451f73b06918b
SHA256

0d2c5f16fc085212c8b04c191cf0b9e336d854161b9a1e9872ceeaf3dfd84ed4
SHA512

f360288fca5d19fd2065728982a195946dc677b50081b5fc7112d43e447077acb8268de18690e6877b24af9d1be9659db769da7329f69068ca4bd8559a637730
SSDEEP

6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fq:hr4iu6/eIo4Rsw33AtsmQ3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0d2c5f16fc085212c8b04c191cf0b9e336d854161b9a1e9872ceeaf3dfd84ed4
- Size
  
  327KB
- MD5
  
  afa50fe2a951b071f7aa231638c37f86
- SHA1
  
  fe06d0da0c08e6ac1348ee58e11451f73b06918b
- SHA256
  
  0d2c5f16fc085212c8b04c191cf0b9e336d854161b9a1e9872ceeaf3dfd84ed4
- SHA512
  
  f360288fca5d19fd2065728982a195946dc677b50081b5fc7112d43e447077acb8268de18690e6877b24af9d1be9659db769da7329f69068ca4bd8559a637730
- SSDEEP
  
  6144:hr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fq:hr4iu6/eIo4Rsw33AtsmQ3
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2