5c1a6c9f7a79572dcbf0249c4c86c78387e22747b632dff8a62dd8c2eca09055 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c1a6c9f7a79572dcbf0249c4c86c78387e22747b632dff8a62dd8c2eca09055
Size

313KB
Sample

221124-lref4shf8v
MD5

fa0618232fc3f98cf89a5be174e8641b
SHA1

a254ac2936d7876dc96d34a57a14860212b5b8e6
SHA256

5c1a6c9f7a79572dcbf0249c4c86c78387e22747b632dff8a62dd8c2eca09055
SHA512

87cff8b2446ab3cde8289a1485659d88b871413500318632c973161ac2e27f1b2babc33ebc041e839afed3b8b6b22bded047416f3fd6199601cbf1b8fb74e16c
SSDEEP

6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LW:Hryu6/eIo4vMResyEf0uP9d9UG0W

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5c1a6c9f7a79572dcbf0249c4c86c78387e22747b632dff8a62dd8c2eca09055
- Size
  
  313KB
- MD5
  
  fa0618232fc3f98cf89a5be174e8641b
- SHA1
  
  a254ac2936d7876dc96d34a57a14860212b5b8e6
- SHA256
  
  5c1a6c9f7a79572dcbf0249c4c86c78387e22747b632dff8a62dd8c2eca09055
- SHA512
  
  87cff8b2446ab3cde8289a1485659d88b871413500318632c973161ac2e27f1b2babc33ebc041e839afed3b8b6b22bded047416f3fd6199601cbf1b8fb74e16c
- SSDEEP
  
  6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LW:Hryu6/eIo4vMResyEf0uP9d9UG0W
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2