b9be95adf010c267d20f892c0fc065e5a5d9f7034cfba1357fde23120f8cdb19 | Triage

Sharing

General

Target

b9be95adf010c267d20f892c0fc065e5a5d9f7034cfba1357fde23120f8cdb19
Size

327KB
Sample

221123-jls17sff95
MD5

5e473b3e3c60d91df1f30a68381d3c4d
SHA1

effcd3175128e11993133fc85926de8cc88d8be6
SHA256

b9be95adf010c267d20f892c0fc065e5a5d9f7034cfba1357fde23120f8cdb19
SHA512

50a6a7972763865b9eb37a3ba768f8ddcd870f7cab236f4c29d9d913821463c475a0a1d76b9a9a9af50afe5c6a0a35785f2c491f8444eb812021f5596f2cf237
SSDEEP

6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FD:Rr4iu6/eIo4Rsw33AtsmQW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b9be95adf010c267d20f892c0fc065e5a5d9f7034cfba1357fde23120f8cdb19
- Size
  
  327KB
- MD5
  
  5e473b3e3c60d91df1f30a68381d3c4d
- SHA1
  
  effcd3175128e11993133fc85926de8cc88d8be6
- SHA256
  
  b9be95adf010c267d20f892c0fc065e5a5d9f7034cfba1357fde23120f8cdb19
- SHA512
  
  50a6a7972763865b9eb37a3ba768f8ddcd870f7cab236f4c29d9d913821463c475a0a1d76b9a9a9af50afe5c6a0a35785f2c491f8444eb812021f5596f2cf237
- SSDEEP
  
  6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FD:Rr4iu6/eIo4Rsw33AtsmQW
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2