b96751d68c21b303af60229038ab49cf57d0db91709b89f9664b12fa49fe556b | Triage

Sharing

General

Target

b96751d68c21b303af60229038ab49cf57d0db91709b89f9664b12fa49fe556b
Size

327KB
Sample

221123-jlylpaff99
MD5

d693262bbc22e6c94694fa6115ccf7e5
SHA1

77fd4ba51b4d56a849b40161a0a7f499700bb232
SHA256

b96751d68c21b303af60229038ab49cf57d0db91709b89f9664b12fa49fe556b
SHA512

a99c2181bf50b3090079030b7d06e7ecf270cf81b48a0c6d4f867153c961d26282a1ce33473b2812bfde235e13dab4d82bca08d8dc59e624515c4b4dc9054271
SSDEEP

6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FP:Jr4iu6/eIo4Rsw33AtsmQK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b96751d68c21b303af60229038ab49cf57d0db91709b89f9664b12fa49fe556b
- Size
  
  327KB
- MD5
  
  d693262bbc22e6c94694fa6115ccf7e5
- SHA1
  
  77fd4ba51b4d56a849b40161a0a7f499700bb232
- SHA256
  
  b96751d68c21b303af60229038ab49cf57d0db91709b89f9664b12fa49fe556b
- SHA512
  
  a99c2181bf50b3090079030b7d06e7ecf270cf81b48a0c6d4f867153c961d26282a1ce33473b2812bfde235e13dab4d82bca08d8dc59e624515c4b4dc9054271
- SSDEEP
  
  6144:Jr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FP:Jr4iu6/eIo4Rsw33AtsmQK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2