b8c591f31ac183672ef7b61643e0d5b52ea839b9d85171dc662378846799b49d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8c591f31ac183672ef7b61643e0d5b52ea839b9d85171dc662378846799b49d
Size

313KB
Sample

221124-palqmsce47
MD5

c15ff79041a706825ccec061f77ca858
SHA1

85a820229135e6a31ab24c4a24c931968246e5f8
SHA256

b8c591f31ac183672ef7b61643e0d5b52ea839b9d85171dc662378846799b49d
SHA512

d942ce7bcc922a36796a4c932826a5f1014e9b605a7448f773f28c19c8d485da0dc25705a369a00f15e92213a318b5380c423db82f1f7ffd01083909b7cf53d5
SSDEEP

6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LG:Hryu6/eIo4vMResyEf0uP9d9UG0G

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b8c591f31ac183672ef7b61643e0d5b52ea839b9d85171dc662378846799b49d
- Size
  
  313KB
- MD5
  
  c15ff79041a706825ccec061f77ca858
- SHA1
  
  85a820229135e6a31ab24c4a24c931968246e5f8
- SHA256
  
  b8c591f31ac183672ef7b61643e0d5b52ea839b9d85171dc662378846799b49d
- SHA512
  
  d942ce7bcc922a36796a4c932826a5f1014e9b605a7448f773f28c19c8d485da0dc25705a369a00f15e92213a318b5380c423db82f1f7ffd01083909b7cf53d5
- SSDEEP
  
  6144:HrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0LG:Hryu6/eIo4vMResyEf0uP9d9UG0G
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2