56d596aef6e8cab82baad6a1e324a31e207ea3ffab81e3d20a77114eef89ab5d | Triage

Sharing

General

Target

56d596aef6e8cab82baad6a1e324a31e207ea3ffab81e3d20a77114eef89ab5d
Size

313KB
Sample

221123-kbjv8agg78
MD5

9f07a46bb296a279ff9e33117c61533f
SHA1

644bf1824f2f1ca3bd4cd58172f17829f0c0aec8
SHA256

56d596aef6e8cab82baad6a1e324a31e207ea3ffab81e3d20a77114eef89ab5d
SHA512

9a977066959d9bd0a759c77b18a82629fab563d9c059dc2167c36a73c6944961f49e8442cff77a5d778e9f6a87306d59f660812ed31f27790c43136d39fb31f9
SSDEEP

6144:5rb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMy:5rRu6/eIo4t3PuFITKUAd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  56d596aef6e8cab82baad6a1e324a31e207ea3ffab81e3d20a77114eef89ab5d
- Size
  
  313KB
- MD5
  
  9f07a46bb296a279ff9e33117c61533f
- SHA1
  
  644bf1824f2f1ca3bd4cd58172f17829f0c0aec8
- SHA256
  
  56d596aef6e8cab82baad6a1e324a31e207ea3ffab81e3d20a77114eef89ab5d
- SHA512
  
  9a977066959d9bd0a759c77b18a82629fab563d9c059dc2167c36a73c6944961f49e8442cff77a5d778e9f6a87306d59f660812ed31f27790c43136d39fb31f9
- SSDEEP
  
  6144:5rb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMy:5rRu6/eIo4t3PuFITKUAd
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2