56a265170ba2f74befd90110e35bd05be3361a5a2882425f703ae77770bdc71e | Triage

Sharing

General

Target

56a265170ba2f74befd90110e35bd05be3361a5a2882425f703ae77770bdc71e
Size

313KB
Sample

221123-kblptacb9s
MD5

a6733e1fc6103fa82479f16fa42d5610
SHA1

bd58422c31c4ff246ab0d82e1b9729d71ab49422
SHA256

56a265170ba2f74befd90110e35bd05be3361a5a2882425f703ae77770bdc71e
SHA512

fbee23b24331ed759ac6911f16a2d903c987714cf62ff9f0c8dbb76040de458556305165e6f0c1409c5fad5485deafc0a27ee2232e3e619c2faefcc85530be47
SSDEEP

6144:nrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LO:nryu6/eIo4vMResyEf0uP9d9UG0O

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  56a265170ba2f74befd90110e35bd05be3361a5a2882425f703ae77770bdc71e
- Size
  
  313KB
- MD5
  
  a6733e1fc6103fa82479f16fa42d5610
- SHA1
  
  bd58422c31c4ff246ab0d82e1b9729d71ab49422
- SHA256
  
  56a265170ba2f74befd90110e35bd05be3361a5a2882425f703ae77770bdc71e
- SHA512
  
  fbee23b24331ed759ac6911f16a2d903c987714cf62ff9f0c8dbb76040de458556305165e6f0c1409c5fad5485deafc0a27ee2232e3e619c2faefcc85530be47
- SSDEEP
  
  6144:nrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LO:nryu6/eIo4vMResyEf0uP9d9UG0O
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2