a4013a6fb549d6f730521815c67f0360dbeaa03be3f1619ec72355baa5f97e80 | Triage

Sharing

General

Target

a4013a6fb549d6f730521815c67f0360dbeaa03be3f1619ec72355baa5f97e80
Size

304KB
Sample

221123-kxtbsahg43
MD5

aed905b0283fdecfe879ca0060d9541a
SHA1

8e9b244a7ec7fb1c17b09c344dbad37fb9414fa0
SHA256

a4013a6fb549d6f730521815c67f0360dbeaa03be3f1619ec72355baa5f97e80
SHA512

739ae986e8d822d2cc888f45a86564c17dcc8d9f166d05e617c54447ba944bcda0a9b0c0377e1329b2661e06dbe6a7c20b6bd58b2dbab1e7f1a6dfe506a4b438
SSDEEP

6144:FrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPK:Frkuu6/eIo4tQW62T+uTwM6YVxm24K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a4013a6fb549d6f730521815c67f0360dbeaa03be3f1619ec72355baa5f97e80
- Size
  
  304KB
- MD5
  
  aed905b0283fdecfe879ca0060d9541a
- SHA1
  
  8e9b244a7ec7fb1c17b09c344dbad37fb9414fa0
- SHA256
  
  a4013a6fb549d6f730521815c67f0360dbeaa03be3f1619ec72355baa5f97e80
- SHA512
  
  739ae986e8d822d2cc888f45a86564c17dcc8d9f166d05e617c54447ba944bcda0a9b0c0377e1329b2661e06dbe6a7c20b6bd58b2dbab1e7f1a6dfe506a4b438
- SSDEEP
  
  6144:FrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPK:Frkuu6/eIo4tQW62T+uTwM6YVxm24K
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2