d21b75e845bccf13e1fb0c019938506f3c4f8330ac0d3dcf9e047dc89cd4176f | Triage

Sharing

General

Target

d21b75e845bccf13e1fb0c019938506f3c4f8330ac0d3dcf9e047dc89cd4176f
Size

313KB
Sample

221127-kgavhagd5v
MD5

4be8c45776347af117f9e241b506e51a
SHA1

f98cd9b77cbe748baad5da27067c775461532e9b
SHA256

d21b75e845bccf13e1fb0c019938506f3c4f8330ac0d3dcf9e047dc89cd4176f
SHA512

d345ee572c922eb23f8b8bff5b2a9e77be6b320d1fc9c770a94dc673bc3e8aaa145aa68b0b8b7fdaee66957ff20b14eed930e555c97cd5a1af2968167828c9a6
SSDEEP

6144:xrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMu:xrRu6/eIo4t3PuFITKUAJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d21b75e845bccf13e1fb0c019938506f3c4f8330ac0d3dcf9e047dc89cd4176f
- Size
  
  313KB
- MD5
  
  4be8c45776347af117f9e241b506e51a
- SHA1
  
  f98cd9b77cbe748baad5da27067c775461532e9b
- SHA256
  
  d21b75e845bccf13e1fb0c019938506f3c4f8330ac0d3dcf9e047dc89cd4176f
- SHA512
  
  d345ee572c922eb23f8b8bff5b2a9e77be6b320d1fc9c770a94dc673bc3e8aaa145aa68b0b8b7fdaee66957ff20b14eed930e555c97cd5a1af2968167828c9a6
- SSDEEP
  
  6144:xrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMu:xrRu6/eIo4t3PuFITKUAJ
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2