8b679b2095699066eb3f1be4107dd78a2b47cf72a04050c705748a5f069d2d99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b679b2095699066eb3f1be4107dd78a2b47cf72a04050c705748a5f069d2d99
Size

314KB
Sample

221121-tr6jlacd71
MD5

3137d381657b20cd389bb6d18045dcd0
SHA1

d9260b8b078627c4de1b4608ba5037e5012cbe4f
SHA256

8b679b2095699066eb3f1be4107dd78a2b47cf72a04050c705748a5f069d2d99
SHA512

0d9065379ff5f3d71604004e1485086ffb181c262f187c7fe36c77222862056f3a06c1e31d2506878e280ad1cca205092ebae494a0faaba9272f0bce1727cb0c
SSDEEP

6144:IrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwp:Ir1kuveY35YO67Wxz7wp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8b679b2095699066eb3f1be4107dd78a2b47cf72a04050c705748a5f069d2d99
- Size
  
  314KB
- MD5
  
  3137d381657b20cd389bb6d18045dcd0
- SHA1
  
  d9260b8b078627c4de1b4608ba5037e5012cbe4f
- SHA256
  
  8b679b2095699066eb3f1be4107dd78a2b47cf72a04050c705748a5f069d2d99
- SHA512
  
  0d9065379ff5f3d71604004e1485086ffb181c262f187c7fe36c77222862056f3a06c1e31d2506878e280ad1cca205092ebae494a0faaba9272f0bce1727cb0c
- SSDEEP
  
  6144:IrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwp:Ir1kuveY35YO67Wxz7wp
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2