0bb6b25cd16e8589f03af8e98bff1f0e5c9d93c303d66d01f4a628f680f82ca0 | Triage

Sharing

General

Target

0bb6b25cd16e8589f03af8e98bff1f0e5c9d93c303d66d01f4a628f680f82ca0
Size

618KB
Sample

221123-kqsrnshd97
MD5

b2a08a5cd7d5cce8dfb8896bca7b1e18
SHA1

cb40c86df024d5278c8650a3d32050b8fbb3a4c0
SHA256

0bb6b25cd16e8589f03af8e98bff1f0e5c9d93c303d66d01f4a628f680f82ca0
SHA512

7c3b746ca60ce2c84bec5f7176092d5780e85c547a5b6d02958496b42615d2f40e60966b2da67a202a0e1da08369017133cc06e145c45c176b068425d8b5e7c1
SSDEEP

12288:frrjkogdCi7WNwx9l8oEGkuveY39Bn3Y4z9GiC0bZ6SBDK:4ogvWNwmDuXnnI4zUiC096

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0bb6b25cd16e8589f03af8e98bff1f0e5c9d93c303d66d01f4a628f680f82ca0
- Size
  
  618KB
- MD5
  
  b2a08a5cd7d5cce8dfb8896bca7b1e18
- SHA1
  
  cb40c86df024d5278c8650a3d32050b8fbb3a4c0
- SHA256
  
  0bb6b25cd16e8589f03af8e98bff1f0e5c9d93c303d66d01f4a628f680f82ca0
- SHA512
  
  7c3b746ca60ce2c84bec5f7176092d5780e85c547a5b6d02958496b42615d2f40e60966b2da67a202a0e1da08369017133cc06e145c45c176b068425d8b5e7c1
- SSDEEP
  
  12288:frrjkogdCi7WNwx9l8oEGkuveY39Bn3Y4z9GiC0bZ6SBDK:4ogvWNwmDuXnnI4zUiC096
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2