be86e191e97f38b2059d52c4971ccc2fa6ccfab82f8a4c9f5f2139081e73ddc0 | Triage

Sharing

General

Target

be86e191e97f38b2059d52c4971ccc2fa6ccfab82f8a4c9f5f2139081e73ddc0
Size

313KB
Sample

221123-jjs87aff33
MD5

0ef2d9427aac196ebc0455e40c3f8f3c
SHA1

6ff8737fd778b2aaa0b78676c668639236c394b6
SHA256

be86e191e97f38b2059d52c4971ccc2fa6ccfab82f8a4c9f5f2139081e73ddc0
SHA512

1cee9f396b44ec6e7c1da61e0bbc17e24234f692bb2095377910503935a02fee0d54cae114c94c5587bc7f207f9bf1136eb74b839cbe49981437cec8eccec97c
SSDEEP

6144:Zrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM6:ZrRu6/eIo4t3PuFITKUAR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  be86e191e97f38b2059d52c4971ccc2fa6ccfab82f8a4c9f5f2139081e73ddc0
- Size
  
  313KB
- MD5
  
  0ef2d9427aac196ebc0455e40c3f8f3c
- SHA1
  
  6ff8737fd778b2aaa0b78676c668639236c394b6
- SHA256
  
  be86e191e97f38b2059d52c4971ccc2fa6ccfab82f8a4c9f5f2139081e73ddc0
- SHA512
  
  1cee9f396b44ec6e7c1da61e0bbc17e24234f692bb2095377910503935a02fee0d54cae114c94c5587bc7f207f9bf1136eb74b839cbe49981437cec8eccec97c
- SSDEEP
  
  6144:Zrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoM6:ZrRu6/eIo4t3PuFITKUAR
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2