037401491f4156e1e0e4f42b8dbb38fcf75c693fc2c09dea46b8e754cd244098 | Triage

Sharing

General

Target

037401491f4156e1e0e4f42b8dbb38fcf75c693fc2c09dea46b8e754cd244098
Size

327KB
Sample

221123-kr78rach6s
MD5

ba57a8d680ec02497166746dd333cc5a
SHA1

d977ac07fa6de00983766970e6371015dadf8be2
SHA256

037401491f4156e1e0e4f42b8dbb38fcf75c693fc2c09dea46b8e754cd244098
SHA512

ecbc63320c2e0cfffbc0eb65115231575e69e11e40ae9c7ecea0da01e0b93d57d97e2927f752804571bc89b4a411f886150e8051e932bb84ce9e47f12996ec7a
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fi:Zr4iu6/eIo4Rsw33AtsmQ7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  037401491f4156e1e0e4f42b8dbb38fcf75c693fc2c09dea46b8e754cd244098
- Size
  
  327KB
- MD5
  
  ba57a8d680ec02497166746dd333cc5a
- SHA1
  
  d977ac07fa6de00983766970e6371015dadf8be2
- SHA256
  
  037401491f4156e1e0e4f42b8dbb38fcf75c693fc2c09dea46b8e754cd244098
- SHA512
  
  ecbc63320c2e0cfffbc0eb65115231575e69e11e40ae9c7ecea0da01e0b93d57d97e2927f752804571bc89b4a411f886150e8051e932bb84ce9e47f12996ec7a
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fi:Zr4iu6/eIo4Rsw33AtsmQ7
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2