c382b66c0b3532f5001c4f3412696cfa7156fe43d4843e8e65b8e45c941d46fb | Triage

Sharing

General

Target

c382b66c0b3532f5001c4f3412696cfa7156fe43d4843e8e65b8e45c941d46fb
Size

313KB
Sample

221127-3rrvwach8t
MD5

6062561d86b04d855a32bb7c0ac265e1
SHA1

9ac8ff51035bdbae53d1389ce98ea138231681d2
SHA256

c382b66c0b3532f5001c4f3412696cfa7156fe43d4843e8e65b8e45c941d46fb
SHA512

88f66d725e2390b8fe521fe6895b6f519c1c6b2b3774e3f267256f4f5604d9dace8342b850d49906326cfc9218cc55f7dffff558d9c7d07135044d0417eef8ea
SSDEEP

6144:krK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lw:kryu6/eIo4vMResyEf0uP9d9UG0w

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c382b66c0b3532f5001c4f3412696cfa7156fe43d4843e8e65b8e45c941d46fb
- Size
  
  313KB
- MD5
  
  6062561d86b04d855a32bb7c0ac265e1
- SHA1
  
  9ac8ff51035bdbae53d1389ce98ea138231681d2
- SHA256
  
  c382b66c0b3532f5001c4f3412696cfa7156fe43d4843e8e65b8e45c941d46fb
- SHA512
  
  88f66d725e2390b8fe521fe6895b6f519c1c6b2b3774e3f267256f4f5604d9dace8342b850d49906326cfc9218cc55f7dffff558d9c7d07135044d0417eef8ea
- SSDEEP
  
  6144:krK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lw:kryu6/eIo4vMResyEf0uP9d9UG0w
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2