2856a2694436ff9b746afbcbdf867304a4987d06e4ad6a21cd8b7376c2aeca65 | Triage

Sharing

General

Target

2856a2694436ff9b746afbcbdf867304a4987d06e4ad6a21cd8b7376c2aeca65
Size

322KB
Sample

221123-kkb7qshb83
MD5

cbe98f8b781c1208f2b776aa89770e66
SHA1

fe83d309d7a3ddc3b5d6f93f2caed2ae3a5ec491
SHA256

2856a2694436ff9b746afbcbdf867304a4987d06e4ad6a21cd8b7376c2aeca65
SHA512

e16e0752c2c156b5933e0ed9c7de134054c3f133af5f84f338a5eade602ac0945dde91d64aebb6288cca47ea8e95afaeb024fad35bda31d04f7012a09621b7a1
SSDEEP

6144:IrV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xcN:IrVQu6/eIo4qQdF8lEeXK11AZDqUmpN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2856a2694436ff9b746afbcbdf867304a4987d06e4ad6a21cd8b7376c2aeca65
- Size
  
  322KB
- MD5
  
  cbe98f8b781c1208f2b776aa89770e66
- SHA1
  
  fe83d309d7a3ddc3b5d6f93f2caed2ae3a5ec491
- SHA256
  
  2856a2694436ff9b746afbcbdf867304a4987d06e4ad6a21cd8b7376c2aeca65
- SHA512
  
  e16e0752c2c156b5933e0ed9c7de134054c3f133af5f84f338a5eade602ac0945dde91d64aebb6288cca47ea8e95afaeb024fad35bda31d04f7012a09621b7a1
- SSDEEP
  
  6144:IrV49uEo2S1YnQmCX492DkwNP3qpYFkKQdF8lgywXW/XK11AVBZ5jhqUnm8xcN:IrVQu6/eIo4qQdF8lEeXK11AZDqUmpN
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2