197648fe5b6712b7301fc1d456a65f01e290cde5bfd905272aa3e83d66c91fd1 | Triage

Sharing

General

Target

197648fe5b6712b7301fc1d456a65f01e290cde5bfd905272aa3e83d66c91fd1
Size

304KB
Sample

221206-tzze9agg5v
MD5

b17493c6fd8e28bec6e09ce5cec8761e
SHA1

1ed5579ed7716b23511c3684c3cb5377800cf128
SHA256

197648fe5b6712b7301fc1d456a65f01e290cde5bfd905272aa3e83d66c91fd1
SHA512

4e730e32e3207a76ea46a106a7cbcb5b6ee001baf74cc729b0e208024a96bf30a92bb94b8c35f32a3c3dd2d0ea504a076204381d238c85328ad764c609227cdb
SSDEEP

6144:XrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7D:XrkX63yRl1uqM+gs+2RLTf+QLShvQx7D

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  197648fe5b6712b7301fc1d456a65f01e290cde5bfd905272aa3e83d66c91fd1
- Size
  
  304KB
- MD5
  
  b17493c6fd8e28bec6e09ce5cec8761e
- SHA1
  
  1ed5579ed7716b23511c3684c3cb5377800cf128
- SHA256
  
  197648fe5b6712b7301fc1d456a65f01e290cde5bfd905272aa3e83d66c91fd1
- SHA512
  
  4e730e32e3207a76ea46a106a7cbcb5b6ee001baf74cc729b0e208024a96bf30a92bb94b8c35f32a3c3dd2d0ea504a076204381d238c85328ad764c609227cdb
- SSDEEP
  
  6144:XrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7D:XrkX63yRl1uqM+gs+2RLTf+QLShvQx7D
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2