b4db8a83a19c713bddeb73c82789c0e6e24e93f739ef9a893bdc563e3f34b4d7 | Triage

Sharing

General

Target

b4db8a83a19c713bddeb73c82789c0e6e24e93f739ef9a893bdc563e3f34b4d7
Size

317KB
Sample

221121-pvkn3seb5s
MD5

13446eef635525c9535b20647bc7f9c7
SHA1

d36f67ea8f4d3102b45aa27075c0aa47479ecf40
SHA256

b4db8a83a19c713bddeb73c82789c0e6e24e93f739ef9a893bdc563e3f34b4d7
SHA512

da15fd1b1d40225ef8977ad55f3cb5d28aaac1707efeb77436cc88757851f4d58a9df10d1a09b86459a099cfd4b673e20b66409e26f45db7932112b3df281065
SSDEEP

6144:kepwLFvuxGoHJppIJeOt2maDDun+51GGvToa:kep6M3DpI0pDDun+jzoa

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  b4db8a83a19c713bddeb73c82789c0e6e24e93f739ef9a893bdc563e3f34b4d7
- Size
  
  317KB
- MD5
  
  13446eef635525c9535b20647bc7f9c7
- SHA1
  
  d36f67ea8f4d3102b45aa27075c0aa47479ecf40
- SHA256
  
  b4db8a83a19c713bddeb73c82789c0e6e24e93f739ef9a893bdc563e3f34b4d7
- SHA512
  
  da15fd1b1d40225ef8977ad55f3cb5d28aaac1707efeb77436cc88757851f4d58a9df10d1a09b86459a099cfd4b673e20b66409e26f45db7932112b3df281065
- SSDEEP
  
  6144:kepwLFvuxGoHJppIJeOt2maDDun+51GGvToa:kep6M3DpI0pDDun+jzoa
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2