b11c187b047982abdf5a2188bf7f578807daa950efa048801a0c0f39ab42c376 | Triage

Sharing

General

Target

b11c187b047982abdf5a2188bf7f578807daa950efa048801a0c0f39ab42c376
Size

313KB
Sample

221123-jqsagafh59
MD5

69b37f3a8b87eb428c88e9102c5a4194
SHA1

6ba950520d7d31e46eb29207e4daeb27997142c5
SHA256

b11c187b047982abdf5a2188bf7f578807daa950efa048801a0c0f39ab42c376
SHA512

68edf0b108b98e89d3dc068938b4fad689cea64445d8c7d3be46987214df67c32ebcc158359213b063987a325772b6fe45db4172bce0eb3c4ff6f14680996dc1
SSDEEP

6144:frK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LD:fryu6/eIo4vMResyEf0uP9d9UG0D

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b11c187b047982abdf5a2188bf7f578807daa950efa048801a0c0f39ab42c376
- Size
  
  313KB
- MD5
  
  69b37f3a8b87eb428c88e9102c5a4194
- SHA1
  
  6ba950520d7d31e46eb29207e4daeb27997142c5
- SHA256
  
  b11c187b047982abdf5a2188bf7f578807daa950efa048801a0c0f39ab42c376
- SHA512
  
  68edf0b108b98e89d3dc068938b4fad689cea64445d8c7d3be46987214df67c32ebcc158359213b063987a325772b6fe45db4172bce0eb3c4ff6f14680996dc1
- SSDEEP
  
  6144:frK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LD:fryu6/eIo4vMResyEf0uP9d9UG0D
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2