c9fc7d51e4e3e8ba5911e89572d5ec9bc5e4b199de801191c85f0a50c165c4f4 | Triage

Sharing

General

Target

c9fc7d51e4e3e8ba5911e89572d5ec9bc5e4b199de801191c85f0a50c165c4f4
Size

311KB
Sample

221204-q26qkahd9y
MD5

0d9c2101df530ec1c874357b87982a20
SHA1

3402bfe3bb12319eb78562a9453d5d7b198545af
SHA256

c9fc7d51e4e3e8ba5911e89572d5ec9bc5e4b199de801191c85f0a50c165c4f4
SHA512

f211e421243a1871403efa3e3b032419ec26527fbe00f73357fb4731e490cbdbb7f046c2d91c193734aee5ce5c218db3312fb8a5d7454e601c35e9ac9f2e3d8f
SSDEEP

6144:SrVu6Y0JQBkQRl7174NpNUM+UHs+Jk5yZ0hbJDSKxFr1F:SrVu63yRl1uqM+gs++UZ0hbJDrJ1F

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c9fc7d51e4e3e8ba5911e89572d5ec9bc5e4b199de801191c85f0a50c165c4f4
- Size
  
  311KB
- MD5
  
  0d9c2101df530ec1c874357b87982a20
- SHA1
  
  3402bfe3bb12319eb78562a9453d5d7b198545af
- SHA256
  
  c9fc7d51e4e3e8ba5911e89572d5ec9bc5e4b199de801191c85f0a50c165c4f4
- SHA512
  
  f211e421243a1871403efa3e3b032419ec26527fbe00f73357fb4731e490cbdbb7f046c2d91c193734aee5ce5c218db3312fb8a5d7454e601c35e9ac9f2e3d8f
- SSDEEP
  
  6144:SrVu6Y0JQBkQRl7174NpNUM+UHs+Jk5yZ0hbJDSKxFr1F:SrVu63yRl1uqM+gs++UZ0hbJDrJ1F
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2