c64dd8fd90792ea0391da994e4cbd990106f0fb138c6528787b21ba2e1710645 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c64dd8fd90792ea0391da994e4cbd990106f0fb138c6528787b21ba2e1710645
Size

304KB
Sample

221127-lmgexafg95
MD5

accc94ede48b89c6f66a40673edcb3aa
SHA1

1db6a13fbf8de77c199d795debb1f95e6f47f86f
SHA256

c64dd8fd90792ea0391da994e4cbd990106f0fb138c6528787b21ba2e1710645
SHA512

6d33dedf4781855bb6d7074199866c74f4b092700a99724d89c9c71507d7f5c4f3c8e8b526ae17add265610ccb02ffbbefba6e8111e38059d4172f2525de2036
SSDEEP

6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP5:lrkuu6/eIo4tQW62T+uTwM6YVxm245

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c64dd8fd90792ea0391da994e4cbd990106f0fb138c6528787b21ba2e1710645
- Size
  
  304KB
- MD5
  
  accc94ede48b89c6f66a40673edcb3aa
- SHA1
  
  1db6a13fbf8de77c199d795debb1f95e6f47f86f
- SHA256
  
  c64dd8fd90792ea0391da994e4cbd990106f0fb138c6528787b21ba2e1710645
- SHA512
  
  6d33dedf4781855bb6d7074199866c74f4b092700a99724d89c9c71507d7f5c4f3c8e8b526ae17add265610ccb02ffbbefba6e8111e38059d4172f2525de2036
- SSDEEP
  
  6144:lrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyP5:lrkuu6/eIo4tQW62T+uTwM6YVxm245
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2