944b13217bc2ef5cb55a3c0ca9cff7fd8ceae3b1e0fb0f6b530a97f4b4619b63 | Triage

Sharing

General

Target

944b13217bc2ef5cb55a3c0ca9cff7fd8ceae3b1e0fb0f6b530a97f4b4619b63
Size

314KB
Sample

221127-ksvdaahc7s
MD5

a60854523ff315a9a644d1e10c751b2b
SHA1

87305f13e1133e95b2d9a0e135165cef236ac0dc
SHA256

944b13217bc2ef5cb55a3c0ca9cff7fd8ceae3b1e0fb0f6b530a97f4b4619b63
SHA512

80bd5a4e40ebe608f8a0d10c840a7968335eeb9fd7ef9e79cb135efeb355ae904cc9f1c883d3a43a50ac7aff1a915d7fe10dfab3b1735899e078e4a3dc53350a
SSDEEP

6144:/rYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZ7:/rdkuveY3CvI5Zdkj6OEu1HS7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  944b13217bc2ef5cb55a3c0ca9cff7fd8ceae3b1e0fb0f6b530a97f4b4619b63
- Size
  
  314KB
- MD5
  
  a60854523ff315a9a644d1e10c751b2b
- SHA1
  
  87305f13e1133e95b2d9a0e135165cef236ac0dc
- SHA256
  
  944b13217bc2ef5cb55a3c0ca9cff7fd8ceae3b1e0fb0f6b530a97f4b4619b63
- SHA512
  
  80bd5a4e40ebe608f8a0d10c840a7968335eeb9fd7ef9e79cb135efeb355ae904cc9f1c883d3a43a50ac7aff1a915d7fe10dfab3b1735899e078e4a3dc53350a
- SSDEEP
  
  6144:/rYbUzkuvcBYC47l2xLnvhueEZdkKQ3+7Oj7hTOVA1HWZ7:/rdkuveY3CvI5Zdkj6OEu1HS7
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2