17c766cee6827dd4529682d387d4d3dcf1c3a87cd55fdc096344cef5bfd31854 | Triage

Sharing

General

Target

17c766cee6827dd4529682d387d4d3dcf1c3a87cd55fdc096344cef5bfd31854
Size

312KB
Sample

221124-ejwl4aah8x
MD5

c32b8e97621755e6979999c332e419fd
SHA1

2cc47ae08e180ff75eff055e940728f35bb13d05
SHA256

17c766cee6827dd4529682d387d4d3dcf1c3a87cd55fdc096344cef5bfd31854
SHA512

54752dde0e6e98b323bbbff40f76467cb094174615f030a3d6806f2d235553dcfbede77dd28e73ef562d5ff90cdadf43c081756b9d9b5b367a63c0ab7737361b
SSDEEP

6144:JrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iqW:Jrkau6/eIo43ts7KcXgXAN7iL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  17c766cee6827dd4529682d387d4d3dcf1c3a87cd55fdc096344cef5bfd31854
- Size
  
  312KB
- MD5
  
  c32b8e97621755e6979999c332e419fd
- SHA1
  
  2cc47ae08e180ff75eff055e940728f35bb13d05
- SHA256
  
  17c766cee6827dd4529682d387d4d3dcf1c3a87cd55fdc096344cef5bfd31854
- SHA512
  
  54752dde0e6e98b323bbbff40f76467cb094174615f030a3d6806f2d235553dcfbede77dd28e73ef562d5ff90cdadf43c081756b9d9b5b367a63c0ab7737361b
- SSDEEP
  
  6144:JrkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iqW:Jrkau6/eIo43ts7KcXgXAN7iL
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2