21f6a57f18a966bcc2ffb2574a7c77241f1665e78d4d76530e98113519720d0e | Triage

Sharing

General

Target

21f6a57f18a966bcc2ffb2574a7c77241f1665e78d4d76530e98113519720d0e
Size

304KB
Sample

221124-eqnj3agc28
MD5

f6be857a88ee6a50aaff3edf8c6edf37
SHA1

1590b13267a36f7db3891dd6e710ec88a696e384
SHA256

21f6a57f18a966bcc2ffb2574a7c77241f1665e78d4d76530e98113519720d0e
SHA512

cffd6fb7f8b316b58211ebf1f5b86581f31ec24977e6918c570a36492cff1825a8033c591e6b422bc21ab45f05f7d655894e6036d6f20ab8b18ce66342bf4e6d
SSDEEP

6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP8:lrkuu6/eIo4tQW62T+uTwM6YVxm248

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  21f6a57f18a966bcc2ffb2574a7c77241f1665e78d4d76530e98113519720d0e
- Size
  
  304KB
- MD5
  
  f6be857a88ee6a50aaff3edf8c6edf37
- SHA1
  
  1590b13267a36f7db3891dd6e710ec88a696e384
- SHA256
  
  21f6a57f18a966bcc2ffb2574a7c77241f1665e78d4d76530e98113519720d0e
- SHA512
  
  cffd6fb7f8b316b58211ebf1f5b86581f31ec24977e6918c570a36492cff1825a8033c591e6b422bc21ab45f05f7d655894e6036d6f20ab8b18ce66342bf4e6d
- SSDEEP
  
  6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP8:lrkuu6/eIo4tQW62T+uTwM6YVxm248
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2