bb8b920dea261afcb454ece7111db408e3668a88c2ac9bae9f057d6e6f73b7e4 | Triage

Sharing

General

Target

bb8b920dea261afcb454ece7111db408e3668a88c2ac9bae9f057d6e6f73b7e4
Size

314KB
Sample

221124-mkghkabe9t
MD5

a05ecf5b9ba2b2609e72ac4bb5d11869
SHA1

a1073ac13a507c22a6f64f9dc1190f8ba47b59c2
SHA256

bb8b920dea261afcb454ece7111db408e3668a88c2ac9bae9f057d6e6f73b7e4
SHA512

bad7b58de4d6cbdcd7c54591535dd9ffa759c15153a8f91bd9ed7c64b412c6b1ebb98db8ecf224d3252dd934d3c531e7b9806110b0b3d214f7d406c6f0e55baf
SSDEEP

6144:6r5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtw:6rqkuveY3RnV6c800oIpbv0SVtw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bb8b920dea261afcb454ece7111db408e3668a88c2ac9bae9f057d6e6f73b7e4
- Size
  
  314KB
- MD5
  
  a05ecf5b9ba2b2609e72ac4bb5d11869
- SHA1
  
  a1073ac13a507c22a6f64f9dc1190f8ba47b59c2
- SHA256
  
  bb8b920dea261afcb454ece7111db408e3668a88c2ac9bae9f057d6e6f73b7e4
- SHA512
  
  bad7b58de4d6cbdcd7c54591535dd9ffa759c15153a8f91bd9ed7c64b412c6b1ebb98db8ecf224d3252dd934d3c531e7b9806110b0b3d214f7d406c6f0e55baf
- SSDEEP
  
  6144:6r5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtw:6rqkuveY3RnV6c800oIpbv0SVtw
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2