ca98f9c020d5b14f9644a4c9d2b2356338b447e66af4316747fa701036ee58d7 | Triage

Sharing

General

Target

ca98f9c020d5b14f9644a4c9d2b2356338b447e66af4316747fa701036ee58d7
Size

325KB
Sample

221127-hk783afh69
MD5

312950a50d48c503836b014491765e9c
SHA1

7bdce94f0168c26feb72c1f264ee7c2dc0ce86b4
SHA256

ca98f9c020d5b14f9644a4c9d2b2356338b447e66af4316747fa701036ee58d7
SHA512

a9fb411eb15cfbc203c173f1664d1be5fbe3fc1b65eb94c8a447cac4132e9efb2bdadb28e9c8d8c21651c3328fc939542eab85116617a1c990724644c33a9767
SSDEEP

6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ou:0r1B3u6/eIo4ArVUBQCCYOqmO5ou

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ca98f9c020d5b14f9644a4c9d2b2356338b447e66af4316747fa701036ee58d7
- Size
  
  325KB
- MD5
  
  312950a50d48c503836b014491765e9c
- SHA1
  
  7bdce94f0168c26feb72c1f264ee7c2dc0ce86b4
- SHA256
  
  ca98f9c020d5b14f9644a4c9d2b2356338b447e66af4316747fa701036ee58d7
- SHA512
  
  a9fb411eb15cfbc203c173f1664d1be5fbe3fc1b65eb94c8a447cac4132e9efb2bdadb28e9c8d8c21651c3328fc939542eab85116617a1c990724644c33a9767
- SSDEEP
  
  6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5ou:0r1B3u6/eIo4ArVUBQCCYOqmO5ou
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2