c491e6f590ed98a0cb269b12e9423a9652a9cd0d27b62be73cdb49e32d2426da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c491e6f590ed98a0cb269b12e9423a9652a9cd0d27b62be73cdb49e32d2426da
Size

304KB
Sample

221127-mdjdkshh58
MD5

5690136e37139716f5c40b9bc370f035
SHA1

78c49d845eff646194784c19e848881a8de4ed45
SHA256

c491e6f590ed98a0cb269b12e9423a9652a9cd0d27b62be73cdb49e32d2426da
SHA512

e2cff729f76b8453c33436af8cd7d03b918fd5da348f67e1a8090d392b30c3be19916b68b171eb5ae7b9d919b371d45a67c0d0067b34a23d005214a524bae684
SSDEEP

6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPi:Vrkuu6/eIo4tQW62T+uTwM6YVxm24i

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c491e6f590ed98a0cb269b12e9423a9652a9cd0d27b62be73cdb49e32d2426da
- Size
  
  304KB
- MD5
  
  5690136e37139716f5c40b9bc370f035
- SHA1
  
  78c49d845eff646194784c19e848881a8de4ed45
- SHA256
  
  c491e6f590ed98a0cb269b12e9423a9652a9cd0d27b62be73cdb49e32d2426da
- SHA512
  
  e2cff729f76b8453c33436af8cd7d03b918fd5da348f67e1a8090d392b30c3be19916b68b171eb5ae7b9d919b371d45a67c0d0067b34a23d005214a524bae684
- SSDEEP
  
  6144:VrkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPi:Vrkuu6/eIo4tQW62T+uTwM6YVxm24i
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2