3c03b1018f7606af8131ba1646cdc1e9081be7ce6d159d2f0bce82082d13d08a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c03b1018f7606af8131ba1646cdc1e9081be7ce6d159d2f0bce82082d13d08a
Size

303KB
Sample

221206-trkl5adb28
MD5

a43779e5fa108b4287629cb3eb9d4140
SHA1

f98967f07603be76244596c4ae5ff7d718f07e67
SHA256

3c03b1018f7606af8131ba1646cdc1e9081be7ce6d159d2f0bce82082d13d08a
SHA512

e569ef4d5bf8b926fc6622de262e7df0a7af9e100a63ba456bd160ba3fda8be4491d365a052d06f45dc733962763a3dd9f79860279cdb0e4b9704daa428a4eba
SSDEEP

6144:TrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7e:TrkX63yRl1uqM+gs+2RLTf+QLShvQx7e

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3c03b1018f7606af8131ba1646cdc1e9081be7ce6d159d2f0bce82082d13d08a
- Size
  
  303KB
- MD5
  
  a43779e5fa108b4287629cb3eb9d4140
- SHA1
  
  f98967f07603be76244596c4ae5ff7d718f07e67
- SHA256
  
  3c03b1018f7606af8131ba1646cdc1e9081be7ce6d159d2f0bce82082d13d08a
- SHA512
  
  e569ef4d5bf8b926fc6622de262e7df0a7af9e100a63ba456bd160ba3fda8be4491d365a052d06f45dc733962763a3dd9f79860279cdb0e4b9704daa428a4eba
- SSDEEP
  
  6144:TrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7e:TrkX63yRl1uqM+gs+2RLTf+QLShvQx7e
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2