1fa806162f30db3b090cea786106723c9b7d16951513297d0f1648e07f114a24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fa806162f30db3b090cea786106723c9b7d16951513297d0f1648e07f114a24
Size

325KB
Sample

221124-mkwmgsge78
MD5

c01797ab20ceb4ff65690dc5afb28a5e
SHA1

123d8475042db01d83134d4e047dc3bdf61cecf4
SHA256

1fa806162f30db3b090cea786106723c9b7d16951513297d0f1648e07f114a24
SHA512

c697399d0423161df207eb4d88f6eb016e8e83d71c5fd3bd16a8f93af6d081e1f2dfaa5e8284ad77d97280cc47df2ee3609ff052b5462df701a08909e98004d2
SSDEEP

6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5od:0r1B3u6/eIo4ArVUBQCCYOqmO5od

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1fa806162f30db3b090cea786106723c9b7d16951513297d0f1648e07f114a24
- Size
  
  325KB
- MD5
  
  c01797ab20ceb4ff65690dc5afb28a5e
- SHA1
  
  123d8475042db01d83134d4e047dc3bdf61cecf4
- SHA256
  
  1fa806162f30db3b090cea786106723c9b7d16951513297d0f1648e07f114a24
- SHA512
  
  c697399d0423161df207eb4d88f6eb016e8e83d71c5fd3bd16a8f93af6d081e1f2dfaa5e8284ad77d97280cc47df2ee3609ff052b5462df701a08909e98004d2
- SSDEEP
  
  6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5od:0r1B3u6/eIo4ArVUBQCCYOqmO5od
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2