216ddfb1bf8a806fc4b76ad87e864584b8ffb7519ce248c163209f25667b468d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

216ddfb1bf8a806fc4b76ad87e864584b8ffb7519ce248c163209f25667b468d
Size

326KB
Sample

221127-lh3gksbc81
MD5

e6500bf5f492aab9a21562ec7c0e7abe
SHA1

76a07a32523457217d04e4274774eddd761bd385
SHA256

216ddfb1bf8a806fc4b76ad87e864584b8ffb7519ce248c163209f25667b468d
SHA512

a518819543072097c183c77e2f3ac6147c79d4fea91f43ff263bba4f4dcbca250a1a6f9439390fbe367f4049f605a69d279a1a6551cf7e9ca6dea848df577414
SSDEEP

6144:Sr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clg8:Sr4gu6/eIo4nULZKMRwxuPfk6E

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  216ddfb1bf8a806fc4b76ad87e864584b8ffb7519ce248c163209f25667b468d
- Size
  
  326KB
- MD5
  
  e6500bf5f492aab9a21562ec7c0e7abe
- SHA1
  
  76a07a32523457217d04e4274774eddd761bd385
- SHA256
  
  216ddfb1bf8a806fc4b76ad87e864584b8ffb7519ce248c163209f25667b468d
- SHA512
  
  a518819543072097c183c77e2f3ac6147c79d4fea91f43ff263bba4f4dcbca250a1a6f9439390fbe367f4049f605a69d279a1a6551cf7e9ca6dea848df577414
- SSDEEP
  
  6144:Sr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clg8:Sr4gu6/eIo4nULZKMRwxuPfk6E
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2