11fcd606571c2172956f4307cbae8de4f43bcc9e537a28af0a05c8c6da770fd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11fcd606571c2172956f4307cbae8de4f43bcc9e537a28af0a05c8c6da770fd9
Size

326KB
Sample

221127-ykejrahg2v
MD5

e17f25c55ee87e518c5e77b07b123b76
SHA1

47976f079323b66be3238e506cc38ece43684de5
SHA256

11fcd606571c2172956f4307cbae8de4f43bcc9e537a28af0a05c8c6da770fd9
SHA512

debc6d4a57cef8298798ec0f8bc65fab43d8aa5fcdb2d398d5749e37603785db789e075f11025cb81ed3c292d0832eaf6459bebc0e0d15f037f19c3ec59f6934
SSDEEP

6144:qr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgK:qr4gu6/eIo4nULZKMRwxuPfk6y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  11fcd606571c2172956f4307cbae8de4f43bcc9e537a28af0a05c8c6da770fd9
- Size
  
  326KB
- MD5
  
  e17f25c55ee87e518c5e77b07b123b76
- SHA1
  
  47976f079323b66be3238e506cc38ece43684de5
- SHA256
  
  11fcd606571c2172956f4307cbae8de4f43bcc9e537a28af0a05c8c6da770fd9
- SHA512
  
  debc6d4a57cef8298798ec0f8bc65fab43d8aa5fcdb2d398d5749e37603785db789e075f11025cb81ed3c292d0832eaf6459bebc0e0d15f037f19c3ec59f6934
- SSDEEP
  
  6144:qr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgK:qr4gu6/eIo4nULZKMRwxuPfk6y
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2