0bb90970533b723c26cd55bffdcca36fb8f1bfb89d0a1ae6437a7f50e6504e3b | Triage

Sharing

General

Target

0bb90970533b723c26cd55bffdcca36fb8f1bfb89d0a1ae6437a7f50e6504e3b
Size

325KB
Sample

221123-kqr55scg91
MD5

c27a923bc00f2d3a285060f541bce3da
SHA1

c03894e61d2a7eee76ce0638fedbca279d7e6418
SHA256

0bb90970533b723c26cd55bffdcca36fb8f1bfb89d0a1ae6437a7f50e6504e3b
SHA512

049f9db634b69146a3bb3612405d1e0a50837b670f60f79f233e52e8d7a529b0c6e04fd803f3e1da36de0948eb9fa6dee6e41e30bd5b33911f603b0d6dda98ba
SSDEEP

6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5on:kr1B3u6/eIo4ArVUBQCCYOqmO5on

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0bb90970533b723c26cd55bffdcca36fb8f1bfb89d0a1ae6437a7f50e6504e3b
- Size
  
  325KB
- MD5
  
  c27a923bc00f2d3a285060f541bce3da
- SHA1
  
  c03894e61d2a7eee76ce0638fedbca279d7e6418
- SHA256
  
  0bb90970533b723c26cd55bffdcca36fb8f1bfb89d0a1ae6437a7f50e6504e3b
- SHA512
  
  049f9db634b69146a3bb3612405d1e0a50837b670f60f79f233e52e8d7a529b0c6e04fd803f3e1da36de0948eb9fa6dee6e41e30bd5b33911f603b0d6dda98ba
- SSDEEP
  
  6144:kr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5on:kr1B3u6/eIo4ArVUBQCCYOqmO5on
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2