4b1e10997bda253e339aec319aa2c5bea4472c65cdb5b068cb85e966c0ec627a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b1e10997bda253e339aec319aa2c5bea4472c65cdb5b068cb85e966c0ec627a
Size

312KB
Sample

221128-akt3faac57
MD5

d336318e9ecf1c77faf38a381cbf6324
SHA1

17b0a69588082e90d67af66cf08ebf96a6b226d0
SHA256

4b1e10997bda253e339aec319aa2c5bea4472c65cdb5b068cb85e966c0ec627a
SHA512

1f902b43c39941a47b5f564f96f7ae73c79c02df54ecca25744d75fb5e247a1d441465986bdf6867a8f18d4fdb8912e3e295b64625c3a84fbc0339b21b11ad6c
SSDEEP

6144:5rkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iaR:5rkau6/eIo43ts7KcXgXAN7iM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4b1e10997bda253e339aec319aa2c5bea4472c65cdb5b068cb85e966c0ec627a
- Size
  
  312KB
- MD5
  
  d336318e9ecf1c77faf38a381cbf6324
- SHA1
  
  17b0a69588082e90d67af66cf08ebf96a6b226d0
- SHA256
  
  4b1e10997bda253e339aec319aa2c5bea4472c65cdb5b068cb85e966c0ec627a
- SHA512
  
  1f902b43c39941a47b5f564f96f7ae73c79c02df54ecca25744d75fb5e247a1d441465986bdf6867a8f18d4fdb8912e3e295b64625c3a84fbc0339b21b11ad6c
- SSDEEP
  
  6144:5rkS9uEo2S1YnQmCX492DkwNP3qpYFK3WSsmbjbqKcs3wP8pXAN7iaR:5rkau6/eIo43ts7KcXgXAN7iM
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2