b1049530e9435da4a551f11474d40f568bbdfda4dc32387431b168a32466e393 | Triage

Sharing

General

Target

b1049530e9435da4a551f11474d40f568bbdfda4dc32387431b168a32466e393
Size

313KB
Sample

221124-d4mn9aee62
MD5

52bcb5a865fe429cb73c4689620341ee
SHA1

b87facaafc38ac5cb7bf74ce4f6874c8be8c087b
SHA256

b1049530e9435da4a551f11474d40f568bbdfda4dc32387431b168a32466e393
SHA512

c22023230e84b28f84f8b057f1fd391b2578622b676a10e2a741a64457bbc4ea7d3d327e29006805618e9021b4ecb1629094e37b584de5f6aa09506ab865f4ec
SSDEEP

6144:Xrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMd:XrRu6/eIo4t3PuFITKUAO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b1049530e9435da4a551f11474d40f568bbdfda4dc32387431b168a32466e393
- Size
  
  313KB
- MD5
  
  52bcb5a865fe429cb73c4689620341ee
- SHA1
  
  b87facaafc38ac5cb7bf74ce4f6874c8be8c087b
- SHA256
  
  b1049530e9435da4a551f11474d40f568bbdfda4dc32387431b168a32466e393
- SHA512
  
  c22023230e84b28f84f8b057f1fd391b2578622b676a10e2a741a64457bbc4ea7d3d327e29006805618e9021b4ecb1629094e37b584de5f6aa09506ab865f4ec
- SSDEEP
  
  6144:Xrb9uEo2S1YnQmCX492DkwNP3qpYFl2YyPuFITzyccux7rnrOzprCoMd:XrRu6/eIo4t3PuFITKUAO
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2