b4158c9868b9292e53fd5b598818aaca05715c5b6f0bcdb4bffcc20acdd4457f | Triage

Sharing

General

Target

b4158c9868b9292e53fd5b598818aaca05715c5b6f0bcdb4bffcc20acdd4457f
Size

314KB
Sample

221123-jpdqpabb8t
MD5

a352501b3bee6a1a86814a211cf6be6c
SHA1

24f922b1d2cf3de1ec01e0e37a751d87ef9d812a
SHA256

b4158c9868b9292e53fd5b598818aaca05715c5b6f0bcdb4bffcc20acdd4457f
SHA512

67bf6b153f8f96ee67dbe82d992ff77f87ee5cd716b576aa2f84dfbe4d75fd58557479344157a887e9655a2ae0a5ae8a31dca7225560ac534b12271a622eb586
SSDEEP

6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw8:Qr1kuveY35YO67Wxz7w8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b4158c9868b9292e53fd5b598818aaca05715c5b6f0bcdb4bffcc20acdd4457f
- Size
  
  314KB
- MD5
  
  a352501b3bee6a1a86814a211cf6be6c
- SHA1
  
  24f922b1d2cf3de1ec01e0e37a751d87ef9d812a
- SHA256
  
  b4158c9868b9292e53fd5b598818aaca05715c5b6f0bcdb4bffcc20acdd4457f
- SHA512
  
  67bf6b153f8f96ee67dbe82d992ff77f87ee5cd716b576aa2f84dfbe4d75fd58557479344157a887e9655a2ae0a5ae8a31dca7225560ac534b12271a622eb586
- SSDEEP
  
  6144:QrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw8:Qr1kuveY35YO67Wxz7w8
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2