436a05c07becf76e749064601e340a058e5f33a5aae497b77d1a772f4e90cff9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

436a05c07becf76e749064601e340a058e5f33a5aae497b77d1a772f4e90cff9
Size

316KB
Sample

221011-sgw2qsbccn
MD5

2b57f1521f2fc823b860d8cc55c6e200
SHA1

f4466294fe3700736e36cbcbe42bce38a935723f
SHA256

436a05c07becf76e749064601e340a058e5f33a5aae497b77d1a772f4e90cff9
SHA512

1e39a68169851d7952a8c6baf0540bb86ac947371b0c00cbd571aa3d797b93132799f068b9e294025ecab469695db411c1f4a588016b7611303b9bd94f137a44
SSDEEP

6144:HrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMG:Hr2kuveY3ZF31N4XxZjG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  436a05c07becf76e749064601e340a058e5f33a5aae497b77d1a772f4e90cff9
- Size
  
  316KB
- MD5
  
  2b57f1521f2fc823b860d8cc55c6e200
- SHA1
  
  f4466294fe3700736e36cbcbe42bce38a935723f
- SHA256
  
  436a05c07becf76e749064601e340a058e5f33a5aae497b77d1a772f4e90cff9
- SHA512
  
  1e39a68169851d7952a8c6baf0540bb86ac947371b0c00cbd571aa3d797b93132799f068b9e294025ecab469695db411c1f4a588016b7611303b9bd94f137a44
- SSDEEP
  
  6144:HrFbUzkuvcBYC47l2xWFAS3r/n2KvN48uFPPDZyMG:Hr2kuveY3ZF31N4XxZjG
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2