b2bf809844fcb085eb3004b8d3d88026ba7380444cce2a47ba02ad3caf886084 | Triage

Sharing

General

Target

b2bf809844fcb085eb3004b8d3d88026ba7380444cce2a47ba02ad3caf886084
Size

325KB
Sample

221123-jp5jeabb91
MD5

626e47c55a554f1fe4d17fd8ed507337
SHA1

6267f0dabc0e62b743a8fea2a73e231e716eba33
SHA256

b2bf809844fcb085eb3004b8d3d88026ba7380444cce2a47ba02ad3caf886084
SHA512

440e57a4d70e6d233e726f7b502cd3ccbf14e6a5586b9d5725626e01e1a761ae188b6c9067de7d61aee922e9c81ca6033f03ee711763740c1ad9a4d12336754a
SSDEEP

6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oh:0r1B3u6/eIo4ArVUBQCCYOqmO5oh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b2bf809844fcb085eb3004b8d3d88026ba7380444cce2a47ba02ad3caf886084
- Size
  
  325KB
- MD5
  
  626e47c55a554f1fe4d17fd8ed507337
- SHA1
  
  6267f0dabc0e62b743a8fea2a73e231e716eba33
- SHA256
  
  b2bf809844fcb085eb3004b8d3d88026ba7380444cce2a47ba02ad3caf886084
- SHA512
  
  440e57a4d70e6d233e726f7b502cd3ccbf14e6a5586b9d5725626e01e1a761ae188b6c9067de7d61aee922e9c81ca6033f03ee711763740c1ad9a4d12336754a
- SSDEEP
  
  6144:0r1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oh:0r1B3u6/eIo4ArVUBQCCYOqmO5oh
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2