db881c74a0cb7ecc0b1ba069621cdc1272d92b4405878fc6e3af7ab063e1f759 | Triage

Sharing

General

Target

db881c74a0cb7ecc0b1ba069621cdc1272d92b4405878fc6e3af7ab063e1f759
Size

312KB
Sample

221002-2bl41segcm
MD5

4c5ebd85d50c50a95d0c75d50dd6ce60
SHA1

b8f9dd82fb60f9d813ac947e0af25869908339d4
SHA256

db881c74a0cb7ecc0b1ba069621cdc1272d92b4405878fc6e3af7ab063e1f759
SHA512

3d02292f14993d96bfc39408748ac26ac50c86af1a70ee95ab8d17e10bc68c7e150e5830c346f71b064a0d689ee3f2d58cfe3c5888eda2afea68669b99b596c3
SSDEEP

6144:krJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzs:krfu6/eIo4XwlWKM231t5UnRr3DdRp5V

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  db881c74a0cb7ecc0b1ba069621cdc1272d92b4405878fc6e3af7ab063e1f759
- Size
  
  312KB
- MD5
  
  4c5ebd85d50c50a95d0c75d50dd6ce60
- SHA1
  
  b8f9dd82fb60f9d813ac947e0af25869908339d4
- SHA256
  
  db881c74a0cb7ecc0b1ba069621cdc1272d92b4405878fc6e3af7ab063e1f759
- SHA512
  
  3d02292f14993d96bfc39408748ac26ac50c86af1a70ee95ab8d17e10bc68c7e150e5830c346f71b064a0d689ee3f2d58cfe3c5888eda2afea68669b99b596c3
- SSDEEP
  
  6144:krJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzs:krfu6/eIo4XwlWKM231t5UnRr3DdRp5V
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2