02556afe87d206cf08b9f900df67994768b7280c73dbed7f3131c36a3cc70536 | Triage

Sharing

General

Target

02556afe87d206cf08b9f900df67994768b7280c73dbed7f3131c36a3cc70536
Size

314KB
Sample

221123-yb5dtace8y
MD5

5af25c663dad19bef159ab7dac9b1570
SHA1

3692fc37953ccde9c849545c30c4a894d671c937
SHA256

02556afe87d206cf08b9f900df67994768b7280c73dbed7f3131c36a3cc70536
SHA512

eaad48aa750ede612e5c111c33a791338b90da41115213871fde15747735911fd0b5d28af54f4dc185d7c8202525c65db837562222b7cd44abb0bf0169a62776
SSDEEP

6144:areyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x9e:arzVm/kkuveY3MGWzlx7DMS7dG9e

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  02556afe87d206cf08b9f900df67994768b7280c73dbed7f3131c36a3cc70536
- Size
  
  314KB
- MD5
  
  5af25c663dad19bef159ab7dac9b1570
- SHA1
  
  3692fc37953ccde9c849545c30c4a894d671c937
- SHA256
  
  02556afe87d206cf08b9f900df67994768b7280c73dbed7f3131c36a3cc70536
- SHA512
  
  eaad48aa750ede612e5c111c33a791338b90da41115213871fde15747735911fd0b5d28af54f4dc185d7c8202525c65db837562222b7cd44abb0bf0169a62776
- SSDEEP
  
  6144:areyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x9e:arzVm/kkuveY3MGWzlx7DMS7dG9e
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2