b097b8486f9e7d98253ad5a416dc73dc86805b457a7d7e87bc51d1494836e1c4 | Triage

Sharing

General

Target

b097b8486f9e7d98253ad5a416dc73dc86805b457a7d7e87bc51d1494836e1c4
Size

313KB
Sample

221123-jq1a3sbc5w
MD5

f72b32606955d685a3d295dea1e85c32
SHA1

3b872112297284752b62e2fd9c2c6061ed615271
SHA256

b097b8486f9e7d98253ad5a416dc73dc86805b457a7d7e87bc51d1494836e1c4
SHA512

c6440e381af23f6a9d58c2798ff743ed90ca3fc03e0c84b8d4c47b5ebfffcd4b9cf1d2e95aef8ceab6602363bf1154ec08c781c41dba19f0b08383aa6b7a637d
SSDEEP

6144:PrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LL:Pryu6/eIo4vMResyEf0uP9d9UG0L

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b097b8486f9e7d98253ad5a416dc73dc86805b457a7d7e87bc51d1494836e1c4
- Size
  
  313KB
- MD5
  
  f72b32606955d685a3d295dea1e85c32
- SHA1
  
  3b872112297284752b62e2fd9c2c6061ed615271
- SHA256
  
  b097b8486f9e7d98253ad5a416dc73dc86805b457a7d7e87bc51d1494836e1c4
- SHA512
  
  c6440e381af23f6a9d58c2798ff743ed90ca3fc03e0c84b8d4c47b5ebfffcd4b9cf1d2e95aef8ceab6602363bf1154ec08c781c41dba19f0b08383aa6b7a637d
- SSDEEP
  
  6144:PrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LL:Pryu6/eIo4vMResyEf0uP9d9UG0L
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2