b98c2a070493f5a536f6417a6c2efdf78315c92c81c60205b697075211d285a7 | Triage

Sharing

General

Target

b98c2a070493f5a536f6417a6c2efdf78315c92c81c60205b697075211d285a7
Size

313KB
Sample

221123-jlwr4aba8z
MD5

ab4dbd0221e811870b58f45b4b6740e6
SHA1

e2a96fcf7f19917aa6c1da6b3e8448f5774731a7
SHA256

b98c2a070493f5a536f6417a6c2efdf78315c92c81c60205b697075211d285a7
SHA512

96d29e51879fc822ff5c25147299025e6286f8e65e4ec3a7412e3e468e6f3ad248d01961e36fae44beae112444af11e1a33ba08b9babce141c898f7a2cba3d88
SSDEEP

6144:Brb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMo:BrRu6/eIo4t3PuFITKUAj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b98c2a070493f5a536f6417a6c2efdf78315c92c81c60205b697075211d285a7
- Size
  
  313KB
- MD5
  
  ab4dbd0221e811870b58f45b4b6740e6
- SHA1
  
  e2a96fcf7f19917aa6c1da6b3e8448f5774731a7
- SHA256
  
  b98c2a070493f5a536f6417a6c2efdf78315c92c81c60205b697075211d285a7
- SHA512
  
  96d29e51879fc822ff5c25147299025e6286f8e65e4ec3a7412e3e468e6f3ad248d01961e36fae44beae112444af11e1a33ba08b9babce141c898f7a2cba3d88
- SSDEEP
  
  6144:Brb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMo:BrRu6/eIo4t3PuFITKUAj
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2