c0b0bbe8e4080063bbdd5f8efc4e3f33e4f608c6161c37d9ef6d7b072669e450 | Triage

Sharing

General

Target

c0b0bbe8e4080063bbdd5f8efc4e3f33e4f608c6161c37d9ef6d7b072669e450
Size

313KB
Sample

221123-jhzpksfe84
MD5

cf2566634c5fdab5db6ae5fb6f2f6ca7
SHA1

f6cfce8065401feb6b0019942a9d9b966d397245
SHA256

c0b0bbe8e4080063bbdd5f8efc4e3f33e4f608c6161c37d9ef6d7b072669e450
SHA512

fa3f1aa1624ab60e57ec5cf924dde08614b15e2c94da71b4fb5a26c4bf024c6ed029ce616fdf1f8e0984ece0e966101e209f9cc6d20faeedc1d1b82508f64f37
SSDEEP

6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L/:3ryu6/eIo4vMResyEf0uP9d9UG0/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c0b0bbe8e4080063bbdd5f8efc4e3f33e4f608c6161c37d9ef6d7b072669e450
- Size
  
  313KB
- MD5
  
  cf2566634c5fdab5db6ae5fb6f2f6ca7
- SHA1
  
  f6cfce8065401feb6b0019942a9d9b966d397245
- SHA256
  
  c0b0bbe8e4080063bbdd5f8efc4e3f33e4f608c6161c37d9ef6d7b072669e450
- SHA512
  
  fa3f1aa1624ab60e57ec5cf924dde08614b15e2c94da71b4fb5a26c4bf024c6ed029ce616fdf1f8e0984ece0e966101e209f9cc6d20faeedc1d1b82508f64f37
- SSDEEP
  
  6144:3rK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0L/:3ryu6/eIo4vMResyEf0uP9d9UG0/
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2