531a644af956e08056467ebda54f9a40da4220c429f00f15b3632326e644d1a6 | Triage

Sharing

General

Target

531a644af956e08056467ebda54f9a40da4220c429f00f15b3632326e644d1a6
Size

325KB
Sample

221123-kb5spacc2y
MD5

bd369a984922ae21c4c9a9a0c5d3e64a
SHA1

1acfcd21e58eb2e04bb791b980fca20652cd1ead
SHA256

531a644af956e08056467ebda54f9a40da4220c429f00f15b3632326e644d1a6
SHA512

17b60c6e1a99fa32d6d33ad511f49d75825c766af4304feaa659a8bec43fc6f2876b56e63ec3dd82a4ef1d23fc2d8c3a2bc9263f4635dc293c1e0e5c650ed0e8
SSDEEP

6144:Er1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o9:Er1B3u6/eIo4ArVUBQCCYOqmO5o9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  531a644af956e08056467ebda54f9a40da4220c429f00f15b3632326e644d1a6
- Size
  
  325KB
- MD5
  
  bd369a984922ae21c4c9a9a0c5d3e64a
- SHA1
  
  1acfcd21e58eb2e04bb791b980fca20652cd1ead
- SHA256
  
  531a644af956e08056467ebda54f9a40da4220c429f00f15b3632326e644d1a6
- SHA512
  
  17b60c6e1a99fa32d6d33ad511f49d75825c766af4304feaa659a8bec43fc6f2876b56e63ec3dd82a4ef1d23fc2d8c3a2bc9263f4635dc293c1e0e5c650ed0e8
- SSDEEP
  
  6144:Er1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5o9:Er1B3u6/eIo4ArVUBQCCYOqmO5o9
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2