b16c920063cace5535da5635fea8bc6c1d47d543345d4ddc267803d857134676 | Triage

Sharing

General

Target

b16c920063cace5535da5635fea8bc6c1d47d543345d4ddc267803d857134676
Size

327KB
Sample

221123-jqnbhsbc4w
MD5

1e9cd438df1e192916ff4b561980e72b
SHA1

ffd3a4c2d9cc29c4610df8e2d4f6b88f9f3d8412
SHA256

b16c920063cace5535da5635fea8bc6c1d47d543345d4ddc267803d857134676
SHA512

4a3620705488b1f90f3d4e61067e90cc32993107f497eb1fea52610c3d13fb0333db52b31451947774ff236cdfb6a276298a1b96c8fba70610a67ef3541d8b7f
SSDEEP

6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fm:Zr4iu6/eIo4Rsw33AtsmQb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b16c920063cace5535da5635fea8bc6c1d47d543345d4ddc267803d857134676
- Size
  
  327KB
- MD5
  
  1e9cd438df1e192916ff4b561980e72b
- SHA1
  
  ffd3a4c2d9cc29c4610df8e2d4f6b88f9f3d8412
- SHA256
  
  b16c920063cace5535da5635fea8bc6c1d47d543345d4ddc267803d857134676
- SHA512
  
  4a3620705488b1f90f3d4e61067e90cc32993107f497eb1fea52610c3d13fb0333db52b31451947774ff236cdfb6a276298a1b96c8fba70610a67ef3541d8b7f
- SSDEEP
  
  6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fm:Zr4iu6/eIo4Rsw33AtsmQb
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2