b0db92e3b95acc309272ace1a70aa01e470f588df10f011cd6613e6d776146c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0db92e3b95acc309272ace1a70aa01e470f588df10f011cd6613e6d776146c2
Size

313KB
Sample

221127-3w6vlahb74
MD5

d631b2271a9c0bc1d08c728114a5b990
SHA1

f8887fe86f90283cf33fbb9fb347f9a3dc5763c7
SHA256

b0db92e3b95acc309272ace1a70aa01e470f588df10f011cd6613e6d776146c2
SHA512

b0fb2d52b4cf127a3bee7860085a9d04ffb8a1c9ebb1b40ac195ac7a96accf0529ae42400592c39b9b9cd9b3f49a91511de4156b65e16973eaabb76a057623c2
SSDEEP

6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYq:Ark4u6/eIo4nlu7trxFtApfgMyrpjYq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b0db92e3b95acc309272ace1a70aa01e470f588df10f011cd6613e6d776146c2
- Size
  
  313KB
- MD5
  
  d631b2271a9c0bc1d08c728114a5b990
- SHA1
  
  f8887fe86f90283cf33fbb9fb347f9a3dc5763c7
- SHA256
  
  b0db92e3b95acc309272ace1a70aa01e470f588df10f011cd6613e6d776146c2
- SHA512
  
  b0fb2d52b4cf127a3bee7860085a9d04ffb8a1c9ebb1b40ac195ac7a96accf0529ae42400592c39b9b9cd9b3f49a91511de4156b65e16973eaabb76a057623c2
- SSDEEP
  
  6144:ArkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYq:Ark4u6/eIo4nlu7trxFtApfgMyrpjYq
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2