81cf31c6088e27d272311ee12e05d9e76e356f0732e6f0e5a2a076116c1a864c | Triage

Sharing

General

Target

81cf31c6088e27d272311ee12e05d9e76e356f0732e6f0e5a2a076116c1a864c
Size

304KB
Sample

221123-kyevsahg64
MD5

ece4c1d5384c7bf6f097878f2dd2813e
SHA1

371e1a86089f67b3e27bc719768d065261f0e62c
SHA256

81cf31c6088e27d272311ee12e05d9e76e356f0732e6f0e5a2a076116c1a864c
SHA512

2ce615ecee96dac521a38c3f3ddfe00612c96e2361eba1054a24cec873fe2f5b83bc50c2fbd9ca511d136ef1db0e65c4763b540fd70c5f4aa8444658bbd297aa
SSDEEP

6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPi:Vrkuu6/eIo4tQW62T+uTwM6YVxm24i

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  81cf31c6088e27d272311ee12e05d9e76e356f0732e6f0e5a2a076116c1a864c
- Size
  
  304KB
- MD5
  
  ece4c1d5384c7bf6f097878f2dd2813e
- SHA1
  
  371e1a86089f67b3e27bc719768d065261f0e62c
- SHA256
  
  81cf31c6088e27d272311ee12e05d9e76e356f0732e6f0e5a2a076116c1a864c
- SHA512
  
  2ce615ecee96dac521a38c3f3ddfe00612c96e2361eba1054a24cec873fe2f5b83bc50c2fbd9ca511d136ef1db0e65c4763b540fd70c5f4aa8444658bbd297aa
- SSDEEP
  
  6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPi:Vrkuu6/eIo4tQW62T+uTwM6YVxm24i
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2