b5bffd5d5968fc39da167b4890a05359ad19488302a965f1809c4b5bb6778889 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5bffd5d5968fc39da167b4890a05359ad19488302a965f1809c4b5bb6778889
Size

316KB
Sample

221121-tn1tyacc7s
MD5

316aa84dbd690e6971c73c34b6ec36e0
SHA1

61202559e0996192913a05dc5f58b96d4e0cbcea
SHA256

b5bffd5d5968fc39da167b4890a05359ad19488302a965f1809c4b5bb6778889
SHA512

a05a821be35a801361d78752ff48304e2edeb4a4dd4809c5997cfcf636a7e2b23783a05d6e723960260814101e287ef31118e178192808c4f00f277d0f7822e8
SSDEEP

6144:jribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xO:jr7kuveY33FJUo7MDkA6L

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b5bffd5d5968fc39da167b4890a05359ad19488302a965f1809c4b5bb6778889
- Size
  
  316KB
- MD5
  
  316aa84dbd690e6971c73c34b6ec36e0
- SHA1
  
  61202559e0996192913a05dc5f58b96d4e0cbcea
- SHA256
  
  b5bffd5d5968fc39da167b4890a05359ad19488302a965f1809c4b5bb6778889
- SHA512
  
  a05a821be35a801361d78752ff48304e2edeb4a4dd4809c5997cfcf636a7e2b23783a05d6e723960260814101e287ef31118e178192808c4f00f277d0f7822e8
- SSDEEP
  
  6144:jribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xO:jr7kuveY33FJUo7MDkA6L
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2