1116e0a6b098cd2d39ecc4476e0ac3e29d45fe6466513e9ce6b1a0337f171e0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f61e3866d948dbf96111dd4cb0ab215
Size

707KB
Sample

240129-kjml3seac4
MD5

7f61e3866d948dbf96111dd4cb0ab215
SHA1

c963218720db40317d6072f5a3557171b5e1ce7e
SHA256

1116e0a6b098cd2d39ecc4476e0ac3e29d45fe6466513e9ce6b1a0337f171e0b
SHA512

b2bc6ddda348f5a2c5433c3a059e31f8cdaf5e0977d99eb0e3531da44aa380d24c7b10400dc2f7fb35d70570113cb1540038a8b9c0d47ffeeb3c4fa58243357b
SSDEEP

12288:sYt1d1qgXJpaCKAZxjGlTO7jVjD/OkPKRxYTdaFwLy0T73ccr:HRoipaCdxao7jtVixYZauLyUDccr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  7f61e3866d948dbf96111dd4cb0ab215
- Size
  
  707KB
- MD5
  
  7f61e3866d948dbf96111dd4cb0ab215
- SHA1
  
  c963218720db40317d6072f5a3557171b5e1ce7e
- SHA256
  
  1116e0a6b098cd2d39ecc4476e0ac3e29d45fe6466513e9ce6b1a0337f171e0b
- SHA512
  
  b2bc6ddda348f5a2c5433c3a059e31f8cdaf5e0977d99eb0e3531da44aa380d24c7b10400dc2f7fb35d70570113cb1540038a8b9c0d47ffeeb3c4fa58243357b
- SSDEEP
  
  12288:sYt1d1qgXJpaCKAZxjGlTO7jVjD/OkPKRxYTdaFwLy0T73ccr:HRoipaCdxao7jtVixYZauLyUDccr
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2