f1c5e82dec2dc2138819cd0c3f7f39e44764331683ea6aec9491a3ee8ab3f7c4 | Triage

Sharing

General

Target

f1c5e82dec2dc2138819cd0c3f7f39e44764331683ea6aec9491a3ee8ab3f7c4
Size

313KB
Sample

221127-v6522saf2z
MD5

24a522364f23a8cf49d025d8eb7e20a0
SHA1

7bd415f8153a5ca2604e85895c92242c1b550949
SHA256

f1c5e82dec2dc2138819cd0c3f7f39e44764331683ea6aec9491a3ee8ab3f7c4
SHA512

15ef807e25a81c7e67cc7fe9260d21d504746c946f4e10ff5a8ac114f8633224b40d0b91d438c010ba12f56508340370e945b1c074c13abac91ab07003d269cb
SSDEEP

6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LY:/ryu6/eIo4vMResyEf0uP9d9UG0Y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f1c5e82dec2dc2138819cd0c3f7f39e44764331683ea6aec9491a3ee8ab3f7c4
- Size
  
  313KB
- MD5
  
  24a522364f23a8cf49d025d8eb7e20a0
- SHA1
  
  7bd415f8153a5ca2604e85895c92242c1b550949
- SHA256
  
  f1c5e82dec2dc2138819cd0c3f7f39e44764331683ea6aec9491a3ee8ab3f7c4
- SHA512
  
  15ef807e25a81c7e67cc7fe9260d21d504746c946f4e10ff5a8ac114f8633224b40d0b91d438c010ba12f56508340370e945b1c074c13abac91ab07003d269cb
- SSDEEP
  
  6144:/rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LY:/ryu6/eIo4vMResyEf0uP9d9UG0Y
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2