5b850dba3abdafd5cca69dfbbbe7bcb4798698451f87c5b93bce9f40ee138395 | Triage

Sharing

General

Target

5b850dba3abdafd5cca69dfbbbe7bcb4798698451f87c5b93bce9f40ee138395
Size

325KB
Sample

221123-kaly7agg38
MD5

fd23305cfab50a51a9e4f3179b3b314b
SHA1

482cdf15cf4eec5f1e632e010a43a46bbfcc06c3
SHA256

5b850dba3abdafd5cca69dfbbbe7bcb4798698451f87c5b93bce9f40ee138395
SHA512

51068defa804fa1a41058c4166bd9d43b53312f55b87bc7ddaa9fbc17614e933070b618c61364e055a08c39080fe856b505839b195d5bf538426341e69ad244c
SSDEEP

6144:Er1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oB:Er1B3u6/eIo4ArVUBQCCYOqmO5oB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5b850dba3abdafd5cca69dfbbbe7bcb4798698451f87c5b93bce9f40ee138395
- Size
  
  325KB
- MD5
  
  fd23305cfab50a51a9e4f3179b3b314b
- SHA1
  
  482cdf15cf4eec5f1e632e010a43a46bbfcc06c3
- SHA256
  
  5b850dba3abdafd5cca69dfbbbe7bcb4798698451f87c5b93bce9f40ee138395
- SHA512
  
  51068defa804fa1a41058c4166bd9d43b53312f55b87bc7ddaa9fbc17614e933070b618c61364e055a08c39080fe856b505839b195d5bf538426341e69ad244c
- SSDEEP
  
  6144:Er1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5oB:Er1B3u6/eIo4ArVUBQCCYOqmO5oB
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2