09ba5911a2636a4ea2a67f0f55f75090a34cb8bc207c48c59453bc1397b4f49e | Triage

Sharing

General

Target

09ba5911a2636a4ea2a67f0f55f75090a34cb8bc207c48c59453bc1397b4f49e
Size

316KB
Sample

221123-kq2dtahe25
MD5

dc164280483aca17d23caf9ba1326b20
SHA1

a6484c31946ba392e4a298a0e5f9bfe9d826a7c9
SHA256

09ba5911a2636a4ea2a67f0f55f75090a34cb8bc207c48c59453bc1397b4f49e
SHA512

346c2ad0dd70bc617a293018778abf253b818a93874b9daf84aaa4c96411a59b1b7404c88c16b98c579969d1bdf5263b99e939da3713eff3780232eed74936c1
SSDEEP

6144:mr9bUzkuvcBYC47l2xjWM4ZZU4An9U+WTASr9:mr+kuveY3mWZW4An9U7TASr9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  09ba5911a2636a4ea2a67f0f55f75090a34cb8bc207c48c59453bc1397b4f49e
- Size
  
  316KB
- MD5
  
  dc164280483aca17d23caf9ba1326b20
- SHA1
  
  a6484c31946ba392e4a298a0e5f9bfe9d826a7c9
- SHA256
  
  09ba5911a2636a4ea2a67f0f55f75090a34cb8bc207c48c59453bc1397b4f49e
- SHA512
  
  346c2ad0dd70bc617a293018778abf253b818a93874b9daf84aaa4c96411a59b1b7404c88c16b98c579969d1bdf5263b99e939da3713eff3780232eed74936c1
- SSDEEP
  
  6144:mr9bUzkuvcBYC47l2xjWM4ZZU4An9U+WTASr9:mr+kuveY3mWZW4An9U7TASr9
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2