568b684bb73dbd6b253531a985c8bc3b731aab369b8e5aa755bab67d09cce2c9 | Triage

Sharing

General

Target

568b684bb73dbd6b253531a985c8bc3b731aab369b8e5aa755bab67d09cce2c9
Size

316KB
Sample

221011-sgc9mabcap
MD5

1bbc7527ae6e7fb7f0038c9ec3d12c30
SHA1

cc9b022d98989506d171dd5d217f087d9cfbe6a9
SHA256

568b684bb73dbd6b253531a985c8bc3b731aab369b8e5aa755bab67d09cce2c9
SHA512

5025ebc5965fd811d53a2d035cd41b01db06e59dd4a77c682a760bab8f6408db20850fdbe04ababd3825a67a3f9d38c5c87619c650a7df79d3b3936317be4f3c
SSDEEP

6144:XrmbUzkuvcBYC47l2xkihNbvnXz3ma0QKctzwl2hvsbHGJu:XrvkuveY3ibXz3UQKctk2hsbH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  568b684bb73dbd6b253531a985c8bc3b731aab369b8e5aa755bab67d09cce2c9
- Size
  
  316KB
- MD5
  
  1bbc7527ae6e7fb7f0038c9ec3d12c30
- SHA1
  
  cc9b022d98989506d171dd5d217f087d9cfbe6a9
- SHA256
  
  568b684bb73dbd6b253531a985c8bc3b731aab369b8e5aa755bab67d09cce2c9
- SHA512
  
  5025ebc5965fd811d53a2d035cd41b01db06e59dd4a77c682a760bab8f6408db20850fdbe04ababd3825a67a3f9d38c5c87619c650a7df79d3b3936317be4f3c
- SSDEEP
  
  6144:XrmbUzkuvcBYC47l2xkihNbvnXz3ma0QKctzwl2hvsbHGJu:XrvkuveY3ibXz3UQKctk2hsbH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2