51c3624ce5e63837c2a8f5030ddc20d62b7cbe6b28b6f0446c9c3bf14f1927e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51c3624ce5e63837c2a8f5030ddc20d62b7cbe6b28b6f0446c9c3bf14f1927e6
Size

325KB
Sample

221125-zd9xragd41
MD5

c1eae5df95847b743826b1bc17080fc6
SHA1

5cb04e557f2ca283f69dc72511486f3d31109009
SHA256

51c3624ce5e63837c2a8f5030ddc20d62b7cbe6b28b6f0446c9c3bf14f1927e6
SHA512

72a799e8bfb9c81d478366c99fd68edd51a4e63c6370ceecb76742a07b8d7266f76cea2d14660ae9ccf82d47ce8e2d7c38ff8fae170ac50b8da13cfb566bca6f
SSDEEP

6144:Er1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oq:Er1B3u6/eIo4ArVUBQCCYOqmO5oq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  51c3624ce5e63837c2a8f5030ddc20d62b7cbe6b28b6f0446c9c3bf14f1927e6
- Size
  
  325KB
- MD5
  
  c1eae5df95847b743826b1bc17080fc6
- SHA1
  
  5cb04e557f2ca283f69dc72511486f3d31109009
- SHA256
  
  51c3624ce5e63837c2a8f5030ddc20d62b7cbe6b28b6f0446c9c3bf14f1927e6
- SHA512
  
  72a799e8bfb9c81d478366c99fd68edd51a4e63c6370ceecb76742a07b8d7266f76cea2d14660ae9ccf82d47ce8e2d7c38ff8fae170ac50b8da13cfb566bca6f
- SSDEEP
  
  6144:Er1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oq:Er1B3u6/eIo4ArVUBQCCYOqmO5oq
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2