d843e12d7651d74a5765d31482f613ccd983fbd754219b1c59c7e137d3d9791d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d843e12d7651d74a5765d31482f613ccd983fbd754219b1c59c7e137d3d9791d
Size

301KB
Sample

221204-q2vcjadg68
MD5

1c2e26937137f31a67b33b011fad2a50
SHA1

4242eb375c2a5ade2aabf9d9bb581bb5af51f874
SHA256

d843e12d7651d74a5765d31482f613ccd983fbd754219b1c59c7e137d3d9791d
SHA512

b39864542d16f340d5f0b27a6a9ae292fd1301020f68f713ca07933550321254ab6d4e56f726b11e2502578d3a4a1603f5d7d4e6e848909c6cd78b8397ad1f66
SSDEEP

6144:RrkX6Y0JQBkQRl7174NpNUM+UHs+Q4qfYgiMNSNXzsz4d+O5ddKHcZjMUtUS77TS:RrkX63yRl1uqM+gs+1lGSNXzSopdgHcW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d843e12d7651d74a5765d31482f613ccd983fbd754219b1c59c7e137d3d9791d
- Size
  
  301KB
- MD5
  
  1c2e26937137f31a67b33b011fad2a50
- SHA1
  
  4242eb375c2a5ade2aabf9d9bb581bb5af51f874
- SHA256
  
  d843e12d7651d74a5765d31482f613ccd983fbd754219b1c59c7e137d3d9791d
- SHA512
  
  b39864542d16f340d5f0b27a6a9ae292fd1301020f68f713ca07933550321254ab6d4e56f726b11e2502578d3a4a1603f5d7d4e6e848909c6cd78b8397ad1f66
- SSDEEP
  
  6144:RrkX6Y0JQBkQRl7174NpNUM+UHs+Q4qfYgiMNSNXzsz4d+O5ddKHcZjMUtUS77TS:RrkX63yRl1uqM+gs+1lGSNXzSopdgHcW
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2