5b5924067b33110dbfa944778656471acfb06718a1d96e100bec5eb522f784ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b5924067b33110dbfa944778656471acfb06718a1d96e100bec5eb522f784ab
Size

315KB
Sample

221002-kkac5sfgd5
MD5

6bf2e36743c6b1b1f71a55c1be879fb0
SHA1

8ce5cdbcedd519d5279d070d93e07805fab04502
SHA256

5b5924067b33110dbfa944778656471acfb06718a1d96e100bec5eb522f784ab
SHA512

ac90cb23fafa313273d89e99df5b17fbfe93e2ada4376ddcb8245aea949c74d7b26edca6f6efeb648a233f866bae5cb799ecf7afcfaaedded7d8093ea23024b7
SSDEEP

6144:oreyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x9K:orzVm/kkuveY3MGWzlx7DMS7dG9K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5b5924067b33110dbfa944778656471acfb06718a1d96e100bec5eb522f784ab
- Size
  
  315KB
- MD5
  
  6bf2e36743c6b1b1f71a55c1be879fb0
- SHA1
  
  8ce5cdbcedd519d5279d070d93e07805fab04502
- SHA256
  
  5b5924067b33110dbfa944778656471acfb06718a1d96e100bec5eb522f784ab
- SHA512
  
  ac90cb23fafa313273d89e99df5b17fbfe93e2ada4376ddcb8245aea949c74d7b26edca6f6efeb648a233f866bae5cb799ecf7afcfaaedded7d8093ea23024b7
- SSDEEP
  
  6144:oreyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x9K:orzVm/kkuveY3MGWzlx7DMS7dG9K
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2