1405cb9fc49c8e0b17dfd9eb260afefec1151c22c6cafc159c215b04d60d63db | Triage

Sharing

General

Target

1405cb9fc49c8e0b17dfd9eb260afefec1151c22c6cafc159c215b04d60d63db
Size

313KB
Sample

221123-kpbrrshd47
MD5

b00ba304ae744a283691b4b0ff116ba6
SHA1

c5c29296d3000104e3fc3e8df07131b9993ca2ea
SHA256

1405cb9fc49c8e0b17dfd9eb260afefec1151c22c6cafc159c215b04d60d63db
SHA512

835908487d8af05701052d42083f323b67f8ea1880dbc3829c9c0c592804edc4ac4b2ac1ce593dfd486a90b216468ea626edccc66b93d7dc794e6745e56b0882
SSDEEP

6144:Rrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMP:RrRu6/eIo4t3PuFITKUA0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1405cb9fc49c8e0b17dfd9eb260afefec1151c22c6cafc159c215b04d60d63db
- Size
  
  313KB
- MD5
  
  b00ba304ae744a283691b4b0ff116ba6
- SHA1
  
  c5c29296d3000104e3fc3e8df07131b9993ca2ea
- SHA256
  
  1405cb9fc49c8e0b17dfd9eb260afefec1151c22c6cafc159c215b04d60d63db
- SHA512
  
  835908487d8af05701052d42083f323b67f8ea1880dbc3829c9c0c592804edc4ac4b2ac1ce593dfd486a90b216468ea626edccc66b93d7dc794e6745e56b0882
- SSDEEP
  
  6144:Rrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMP:RrRu6/eIo4t3PuFITKUA0
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2