General

  • Target

    b1fa0532b491bb318772f576bbab7595a67fc444aea8d8649ad5cbb7e850e8be

  • Size

    304KB

  • Sample

    221123-kxbfzahg26

  • MD5

    8bfc48537909e9b2a52cececd2175598

  • SHA1

    0e12fd5eb0b94c68e490c9f0bd22de5f43f7e4df

  • SHA256

    b1fa0532b491bb318772f576bbab7595a67fc444aea8d8649ad5cbb7e850e8be

  • SHA512

    68cedc6066c87e2df0c4f5c44eb864558aa07de1f29b2ae432f704549288622066d469cfd0cb69aac5ce171d191c3b3f1e6f5ed1f81f531c162c2eb8b5e17e22

  • SSDEEP

    6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPr:drkuu6/eIo4tQW62T+uTwM6YVxm24r

Score
7/10

Malware Config

Targets

    • Target

      b1fa0532b491bb318772f576bbab7595a67fc444aea8d8649ad5cbb7e850e8be

    • Size

      304KB

    • MD5

      8bfc48537909e9b2a52cececd2175598

    • SHA1

      0e12fd5eb0b94c68e490c9f0bd22de5f43f7e4df

    • SHA256

      b1fa0532b491bb318772f576bbab7595a67fc444aea8d8649ad5cbb7e850e8be

    • SHA512

      68cedc6066c87e2df0c4f5c44eb864558aa07de1f29b2ae432f704549288622066d469cfd0cb69aac5ce171d191c3b3f1e6f5ed1f81f531c162c2eb8b5e17e22

    • SSDEEP

      6144:drkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPr:drkuu6/eIo4tQW62T+uTwM6YVxm24r

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks