5829102b2603598fb52b1e59f71e9dcf31b1da5daf8295645a81bdb5a240c82b | Triage

Sharing

General

Target

5829102b2603598fb52b1e59f71e9dcf31b1da5daf8295645a81bdb5a240c82b
Size

2.5MB
Sample

221127-ayb4sabd8z
MD5

da80ba611eccd15a19a3a295be485860
SHA1

83b3244f422944158bc13099a7b6cbd0212fb45e
SHA256

5829102b2603598fb52b1e59f71e9dcf31b1da5daf8295645a81bdb5a240c82b
SHA512

1a5cea7fc224aa204a3bfc5c3930863d88b5f9cb0a8f1e8277456038258db758cb729c278753b26c2bcc2b57dde644e560286d8e49308fc69efc5ccabdb17266
SSDEEP

12288:jz+OtmkkEzzAz4fDT5nc/kuC4QoUT5zFP:jdtmkkyzQ4fDT5nc/krloU1zFP

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  5829102b2603598fb52b1e59f71e9dcf31b1da5daf8295645a81bdb5a240c82b
- Size
  
  2.5MB
- MD5
  
  da80ba611eccd15a19a3a295be485860
- SHA1
  
  83b3244f422944158bc13099a7b6cbd0212fb45e
- SHA256
  
  5829102b2603598fb52b1e59f71e9dcf31b1da5daf8295645a81bdb5a240c82b
- SHA512
  
  1a5cea7fc224aa204a3bfc5c3930863d88b5f9cb0a8f1e8277456038258db758cb729c278753b26c2bcc2b57dde644e560286d8e49308fc69efc5ccabdb17266
- SSDEEP
  
  12288:jz+OtmkkEzzAz4fDT5nc/kuC4QoUT5zFP:jdtmkkyzQ4fDT5nc/krloU1zFP
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2