5163089bb551ff7ee6ffbff4973d8bb4e91a27b0cd7b6bdf8e8f991ab0865c90 | Triage

Sharing

General

Target

5163089bb551ff7ee6ffbff4973d8bb4e91a27b0cd7b6bdf8e8f991ab0865c90
Size

304KB
Sample

221123-ky84mahg84
MD5

b1bed97a3b4798cd91ff8c489effe451
SHA1

5d798b852d7900e1bcc1a2d1f40f196732001977
SHA256

5163089bb551ff7ee6ffbff4973d8bb4e91a27b0cd7b6bdf8e8f991ab0865c90
SHA512

9ede9d5502d7e88cc6f669750416bce820e40cf92e3f1256374fce049e91ba0491887d7e5953083f58dd25ab87816df583485ceeecfcfccd092200bf5f4defbf
SSDEEP

6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP/:1rkuu6/eIo4tQW62T+uTwM6YVxm24/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5163089bb551ff7ee6ffbff4973d8bb4e91a27b0cd7b6bdf8e8f991ab0865c90
- Size
  
  304KB
- MD5
  
  b1bed97a3b4798cd91ff8c489effe451
- SHA1
  
  5d798b852d7900e1bcc1a2d1f40f196732001977
- SHA256
  
  5163089bb551ff7ee6ffbff4973d8bb4e91a27b0cd7b6bdf8e8f991ab0865c90
- SHA512
  
  9ede9d5502d7e88cc6f669750416bce820e40cf92e3f1256374fce049e91ba0491887d7e5953083f58dd25ab87816df583485ceeecfcfccd092200bf5f4defbf
- SSDEEP
  
  6144:1rkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP/:1rkuu6/eIo4tQW62T+uTwM6YVxm24/
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2