0b566405ebfa4fae643ef30dfa1060b5098d4facbbf146fbe7ebc926b6dc4ac9 | Triage

Sharing

General

Target

0b566405ebfa4fae643ef30dfa1060b5098d4facbbf146fbe7ebc926b6dc4ac9
Size

313KB
Sample

221123-kqw44ach2v
MD5

d85606e2e08efe89463e6e695328d8b4
SHA1

a01ab73c0fcaae79911f9a85e94630d04e0b6b4d
SHA256

0b566405ebfa4fae643ef30dfa1060b5098d4facbbf146fbe7ebc926b6dc4ac9
SHA512

0c61fa3c4577429e4895f5ac724a00ef49d10200f48b6505e9aee05c727c23abf51e8790c57475cc39e64dedc81de8c51614379aa80115255357d25565b13094
SSDEEP

6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYV:4rk4u6/eIo4nlu7trxFtApfgMyrpjYV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0b566405ebfa4fae643ef30dfa1060b5098d4facbbf146fbe7ebc926b6dc4ac9
- Size
  
  313KB
- MD5
  
  d85606e2e08efe89463e6e695328d8b4
- SHA1
  
  a01ab73c0fcaae79911f9a85e94630d04e0b6b4d
- SHA256
  
  0b566405ebfa4fae643ef30dfa1060b5098d4facbbf146fbe7ebc926b6dc4ac9
- SHA512
  
  0c61fa3c4577429e4895f5ac724a00ef49d10200f48b6505e9aee05c727c23abf51e8790c57475cc39e64dedc81de8c51614379aa80115255357d25565b13094
- SSDEEP
  
  6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYV:4rk4u6/eIo4nlu7trxFtApfgMyrpjYV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2