1871fed3c4cc6a541953e789d4e0b2655a7594b395d8b4ca69802b4522427778 | Triage

Sharing

General

Target

1871fed3c4cc6a541953e789d4e0b2655a7594b395d8b4ca69802b4522427778
Size

304KB
Sample

221127-1bk2aaad82
MD5

b8f1928b11fc9602fabb8a9ccb857b93
SHA1

f3628037e660e799a44c4b92c5c9dca9888bec0c
SHA256

1871fed3c4cc6a541953e789d4e0b2655a7594b395d8b4ca69802b4522427778
SHA512

16dec54c84d9e35b3b9e2b9639e54ff3b30eb0cbd9f819c6935c412a61032f06b97eb019f0ef4aca8ff926823ae2869aa92d6ae1159d68414c2141cc1858819f
SSDEEP

6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPN:Nrkuu6/eIo4tQW62T+uTwM6YVxm24N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1871fed3c4cc6a541953e789d4e0b2655a7594b395d8b4ca69802b4522427778
- Size
  
  304KB
- MD5
  
  b8f1928b11fc9602fabb8a9ccb857b93
- SHA1
  
  f3628037e660e799a44c4b92c5c9dca9888bec0c
- SHA256
  
  1871fed3c4cc6a541953e789d4e0b2655a7594b395d8b4ca69802b4522427778
- SHA512
  
  16dec54c84d9e35b3b9e2b9639e54ff3b30eb0cbd9f819c6935c412a61032f06b97eb019f0ef4aca8ff926823ae2869aa92d6ae1159d68414c2141cc1858819f
- SSDEEP
  
  6144:NrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPN:Nrkuu6/eIo4tQW62T+uTwM6YVxm24N
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2