2b644858959dbf76e77359631551afbbb8212785a467e2e568ef32c07e12c98b | Triage

Sharing

General

Target

2b644858959dbf76e77359631551afbbb8212785a467e2e568ef32c07e12c98b
Size

304KB
Sample

221123-kz3cgadc3w
MD5

d40e274c1d513070e1ad45b0b1641d22
SHA1

8322e1ca7b5811eab67a84ee121a4899e984bbf7
SHA256

2b644858959dbf76e77359631551afbbb8212785a467e2e568ef32c07e12c98b
SHA512

236fe22544ed8a8e0504c6e3dc10ea49611d7e2c0ef575511e1ea3d38a2d7840a186660bf05176a83aa77b9d4426df1f9844288681a2dc70327037bcc1426369
SSDEEP

6144:trkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPz:trkuu6/eIo4tQW62T+uTwM6YVxm24hp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2b644858959dbf76e77359631551afbbb8212785a467e2e568ef32c07e12c98b
- Size
  
  304KB
- MD5
  
  d40e274c1d513070e1ad45b0b1641d22
- SHA1
  
  8322e1ca7b5811eab67a84ee121a4899e984bbf7
- SHA256
  
  2b644858959dbf76e77359631551afbbb8212785a467e2e568ef32c07e12c98b
- SHA512
  
  236fe22544ed8a8e0504c6e3dc10ea49611d7e2c0ef575511e1ea3d38a2d7840a186660bf05176a83aa77b9d4426df1f9844288681a2dc70327037bcc1426369
- SSDEEP
  
  6144:trkW9uEo2S1YnQmCX492DkwNP3qpYF4AqqWb+qR9h+uqkNfoM6YV5TmNa1a3SyPz:trkuu6/eIo4tQW62T+uTwM6YVxm24hp
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2