bce8329efbe7cd797fc9a3039ac7808157fb9b7931b99c5bb3075d2bfd768e36 | Triage

Sharing

General

Target

bce8329efbe7cd797fc9a3039ac7808157fb9b7931b99c5bb3075d2bfd768e36
Size

325KB
Sample

221123-jkfz9aba4y
MD5

617031e65ed7f6b0bdc53ec7060b612b
SHA1

41e62fbf7f7653dd7af46792f3c9d52043ca573c
SHA256

bce8329efbe7cd797fc9a3039ac7808157fb9b7931b99c5bb3075d2bfd768e36
SHA512

bf35494d0786d9a28eb6f71417b7001421bf24c2b305f9a65f7a74652f7c73f9544cc59dcba9a8d07ff8b60681252903f5510f6789552148502a2351409e72d9
SSDEEP

6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oO:0r1B3u6/eIo4ArVUBQCCYOqmO5oO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bce8329efbe7cd797fc9a3039ac7808157fb9b7931b99c5bb3075d2bfd768e36
- Size
  
  325KB
- MD5
  
  617031e65ed7f6b0bdc53ec7060b612b
- SHA1
  
  41e62fbf7f7653dd7af46792f3c9d52043ca573c
- SHA256
  
  bce8329efbe7cd797fc9a3039ac7808157fb9b7931b99c5bb3075d2bfd768e36
- SHA512
  
  bf35494d0786d9a28eb6f71417b7001421bf24c2b305f9a65f7a74652f7c73f9544cc59dcba9a8d07ff8b60681252903f5510f6789552148502a2351409e72d9
- SSDEEP
  
  6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oO:0r1B3u6/eIo4ArVUBQCCYOqmO5oO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2