6fb2e244f0749e7dc45867b34f578a68efc49c8735671c84d0d3fab9024045d9 | Triage

Sharing

General

Target

6fb2e244f0749e7dc45867b34f578a68efc49c8735671c84d0d3fab9024045d9
Size

325KB
Sample

221123-j6md6age86
MD5

bb066c8e1a342a544ddfb20af4420f3b
SHA1

65d40f79c8a2f7aa601a0cca3f6a2d94af1b8e1b
SHA256

6fb2e244f0749e7dc45867b34f578a68efc49c8735671c84d0d3fab9024045d9
SHA512

78410637ae6ba6f3080748f93f223e85c76a81613ccb57e426f5b3cd1fd7d5f67b8d5634d5e6bab08a412b012ad042792eddccbaa97741351d34e2df80526031
SSDEEP

6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5op:cr1B3u6/eIo4ArVUBQCCYOqmO5op

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6fb2e244f0749e7dc45867b34f578a68efc49c8735671c84d0d3fab9024045d9
- Size
  
  325KB
- MD5
  
  bb066c8e1a342a544ddfb20af4420f3b
- SHA1
  
  65d40f79c8a2f7aa601a0cca3f6a2d94af1b8e1b
- SHA256
  
  6fb2e244f0749e7dc45867b34f578a68efc49c8735671c84d0d3fab9024045d9
- SHA512
  
  78410637ae6ba6f3080748f93f223e85c76a81613ccb57e426f5b3cd1fd7d5f67b8d5634d5e6bab08a412b012ad042792eddccbaa97741351d34e2df80526031
- SSDEEP
  
  6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5op:cr1B3u6/eIo4ArVUBQCCYOqmO5op
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2