1151ec8b4c64a0f2fd8b58b4bc0b23b354157b8f60cd6d78feabb6119460e325 | Triage

Sharing

General

Target

1225a56b8293b90ecd40642f90457616
Size

327KB
Sample

231225-ke26zabdfp
MD5

1225a56b8293b90ecd40642f90457616
SHA1

75c016e0b748429242bfb113a78da73bbe7d414d
SHA256

1151ec8b4c64a0f2fd8b58b4bc0b23b354157b8f60cd6d78feabb6119460e325
SHA512

ab4207ef0234115b2a1c0136dedd7cf10dd534ff476af9e614a5f83e69e00c9102209cc83c6060a4b13a9f827e6097bcd1f0f5c41d2741866008470bfc9c2e4b
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fs:Zr4iu6/eIo4Rsw33AtsmQp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1225a56b8293b90ecd40642f90457616
- Size
  
  327KB
- MD5
  
  1225a56b8293b90ecd40642f90457616
- SHA1
  
  75c016e0b748429242bfb113a78da73bbe7d414d
- SHA256
  
  1151ec8b4c64a0f2fd8b58b4bc0b23b354157b8f60cd6d78feabb6119460e325
- SHA512
  
  ab4207ef0234115b2a1c0136dedd7cf10dd534ff476af9e614a5f83e69e00c9102209cc83c6060a4b13a9f827e6097bcd1f0f5c41d2741866008470bfc9c2e4b
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fs:Zr4iu6/eIo4Rsw33AtsmQp
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2