dbb7585889c052f7f7eaa675b217076024ecc0b4ce60d131e0ed2b9a014bbe44 | Triage

Sharing

General

Target

dbb7585889c052f7f7eaa675b217076024ecc0b4ce60d131e0ed2b9a014bbe44
Size

316KB
Sample

221004-hwc73aghdm
MD5

56322d3a9daa6d4f1e7e8e1ac01f2550
SHA1

af31165362a1c83e3cf63a5f71983f353c6e3034
SHA256

dbb7585889c052f7f7eaa675b217076024ecc0b4ce60d131e0ed2b9a014bbe44
SHA512

23dc7f3eb20ba180798fef08d98f6f6411669d2f058d0d0544634d8091b13c4773eab9c179b6099be32aa04392961fa825a12abf482129e727a2d713571270bc
SSDEEP

6144:PrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMS:Pr2kuveY3ZF31N4XxZjS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dbb7585889c052f7f7eaa675b217076024ecc0b4ce60d131e0ed2b9a014bbe44
- Size
  
  316KB
- MD5
  
  56322d3a9daa6d4f1e7e8e1ac01f2550
- SHA1
  
  af31165362a1c83e3cf63a5f71983f353c6e3034
- SHA256
  
  dbb7585889c052f7f7eaa675b217076024ecc0b4ce60d131e0ed2b9a014bbe44
- SHA512
  
  23dc7f3eb20ba180798fef08d98f6f6411669d2f058d0d0544634d8091b13c4773eab9c179b6099be32aa04392961fa825a12abf482129e727a2d713571270bc
- SSDEEP
  
  6144:PrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMS:Pr2kuveY3ZF31N4XxZjS
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2