b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82 | Triage

Sharing

General

Target

b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82
Size

327KB
Sample

221123-jmaw1sfg32
MD5

1d1ed76e6b516b30b38be70028d11f53
SHA1

e110d42df349fff1644612b7269ec942a0b47286
SHA256

b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82
SHA512

2d6ed03c69576a535108cab95adf608eba97935a6d02cc74d2cfc248d42dd97505e77dc50ac93d1eb3d28948d42add1fa7fc2ab49d498486a71c1232cbcdec6d
SSDEEP

6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FZ:pr4iu6/eIo4Rsw33AtsmQc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82
- Size
  
  327KB
- MD5
  
  1d1ed76e6b516b30b38be70028d11f53
- SHA1
  
  e110d42df349fff1644612b7269ec942a0b47286
- SHA256
  
  b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82
- SHA512
  
  2d6ed03c69576a535108cab95adf608eba97935a6d02cc74d2cfc248d42dd97505e77dc50ac93d1eb3d28948d42add1fa7fc2ab49d498486a71c1232cbcdec6d
- SSDEEP
  
  6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FZ:pr4iu6/eIo4Rsw33AtsmQc
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2