c1e0dc5aead7f9473af98e35cb9164c8647bfd01de937838cc61484dd5156968 | Triage

Sharing

General

Target

c1e0dc5aead7f9473af98e35cb9164c8647bfd01de937838cc61484dd5156968
Size

313KB
Sample

221127-k397gsaa9v
MD5

fa19670b17a47a60b7150df6a4fe2fba
SHA1

3f3799c55d9fa6325da6558933a3c916f39cba30
SHA256

c1e0dc5aead7f9473af98e35cb9164c8647bfd01de937838cc61484dd5156968
SHA512

58534b188a3db194772c59f47aea39cc37699cf19bb8ce08f45e62c4402d664e23ea41cfb9fc3f9d949ba54412e91cacbb27ba12b755329ee5b6c4d15ea884f7
SSDEEP

6144:PrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LSv:Pryu6/eIo4vMResyEf0uP9d9UG0Sv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c1e0dc5aead7f9473af98e35cb9164c8647bfd01de937838cc61484dd5156968
- Size
  
  313KB
- MD5
  
  fa19670b17a47a60b7150df6a4fe2fba
- SHA1
  
  3f3799c55d9fa6325da6558933a3c916f39cba30
- SHA256
  
  c1e0dc5aead7f9473af98e35cb9164c8647bfd01de937838cc61484dd5156968
- SHA512
  
  58534b188a3db194772c59f47aea39cc37699cf19bb8ce08f45e62c4402d664e23ea41cfb9fc3f9d949ba54412e91cacbb27ba12b755329ee5b6c4d15ea884f7
- SSDEEP
  
  6144:PrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LSv:Pryu6/eIo4vMResyEf0uP9d9UG0Sv
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2