564223fe30cb34d0c081be346cfee8be92fcf4463698cf0ccb7e7feb94626ba1 | Triage

Sharing

General

Target

564223fe30cb34d0c081be346cfee8be92fcf4463698cf0ccb7e7feb94626ba1
Size

326KB
Sample

221123-kbnt6sgg84
MD5

b39ef0e29ec6d271b7d119dd898ba247
SHA1

913aea6ecb7c27568e2afb873897040bbb8e7423
SHA256

564223fe30cb34d0c081be346cfee8be92fcf4463698cf0ccb7e7feb94626ba1
SHA512

1c0f8ffa7963891d9ecbc1a17f0398fe2da6e19e74409d455f9c067e4df965faad5855d424c9fa9f71d3b73a89e4c8263f26170d1e253b6f7671eed78f2583ea
SSDEEP

6144:yr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgRqG:yr4gu6/eIo4nULZKMRwxuPfk6kG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  564223fe30cb34d0c081be346cfee8be92fcf4463698cf0ccb7e7feb94626ba1
- Size
  
  326KB
- MD5
  
  b39ef0e29ec6d271b7d119dd898ba247
- SHA1
  
  913aea6ecb7c27568e2afb873897040bbb8e7423
- SHA256
  
  564223fe30cb34d0c081be346cfee8be92fcf4463698cf0ccb7e7feb94626ba1
- SHA512
  
  1c0f8ffa7963891d9ecbc1a17f0398fe2da6e19e74409d455f9c067e4df965faad5855d424c9fa9f71d3b73a89e4c8263f26170d1e253b6f7671eed78f2583ea
- SSDEEP
  
  6144:yr4I9uEo2S1YnQmCX492DkwNP3qpYFuT9U1FZA5MRwxuhhfch6clgRqG:yr4gu6/eIo4nULZKMRwxuPfk6kG
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2