5c6bcc8b237c77238838778fe607ca4dec2931c07c9845617a4c8068852aa34d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c6bcc8b237c77238838778fe607ca4dec2931c07c9845617a4c8068852aa34d
Size

326KB
Sample

221124-l1xdaafc72
MD5

a6f266e49f7c4cce122f6ba795e9cfa0
SHA1

3ab349e81d91f55fb1412f1ce7eba5ff389d906b
SHA256

5c6bcc8b237c77238838778fe607ca4dec2931c07c9845617a4c8068852aa34d
SHA512

cd6af7a939d03d79a70fcc9b2d15a78fe4ee3c26c8c15d23b6c81f27e9f1e74b3d51888bb7389c48de842edba72f5fdd6fbf7a9c8d5b995067901af9609827bb
SSDEEP

6144:+r469uEo2S1YnQmCX492DkwNP3qpYFhVq5fRr7kW2hjCmPLSysJmai:+r4iu6/eIo44O0W2UY2yyi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5c6bcc8b237c77238838778fe607ca4dec2931c07c9845617a4c8068852aa34d
- Size
  
  326KB
- MD5
  
  a6f266e49f7c4cce122f6ba795e9cfa0
- SHA1
  
  3ab349e81d91f55fb1412f1ce7eba5ff389d906b
- SHA256
  
  5c6bcc8b237c77238838778fe607ca4dec2931c07c9845617a4c8068852aa34d
- SHA512
  
  cd6af7a939d03d79a70fcc9b2d15a78fe4ee3c26c8c15d23b6c81f27e9f1e74b3d51888bb7389c48de842edba72f5fdd6fbf7a9c8d5b995067901af9609827bb
- SSDEEP
  
  6144:+r469uEo2S1YnQmCX492DkwNP3qpYFhVq5fRr7kW2hjCmPLSysJmai:+r4iu6/eIo44O0W2UY2yyi
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2