General

  • Target

    49b5251514b7f9fb59df3d1c8186d470dba410f78de38ea7903a9e4e08cdf595

  • Size

    304KB

  • Sample

    221123-kzcrtahg88

  • MD5

    f2af68ed64930e728c29f48b0f80a99b

  • SHA1

    e171d672d756c4f516c21310daf490769250c6bc

  • SHA256

    49b5251514b7f9fb59df3d1c8186d470dba410f78de38ea7903a9e4e08cdf595

  • SHA512

    337a833f2b5ed08a7f321e7d74fbd0f7e5abc86721a38f8b0ad0387b60a99aef01a9f2d4963e821016ec62a2bfa5e8ec5b219218488ca514ec64c37969000b94

  • SSDEEP

    6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPD:Nrkuu6/eIo4tQW62T+uTwM6YVxm24D

Score
7/10

Malware Config

Targets

    • Target

      49b5251514b7f9fb59df3d1c8186d470dba410f78de38ea7903a9e4e08cdf595

    • Size

      304KB

    • MD5

      f2af68ed64930e728c29f48b0f80a99b

    • SHA1

      e171d672d756c4f516c21310daf490769250c6bc

    • SHA256

      49b5251514b7f9fb59df3d1c8186d470dba410f78de38ea7903a9e4e08cdf595

    • SHA512

      337a833f2b5ed08a7f321e7d74fbd0f7e5abc86721a38f8b0ad0387b60a99aef01a9f2d4963e821016ec62a2bfa5e8ec5b219218488ca514ec64c37969000b94

    • SSDEEP

      6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPD:Nrkuu6/eIo4tQW62T+uTwM6YVxm24D

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks