d56751aaf86d740e308a428c9b33d39e78eb884222c42a6004e3449e89730d16 | Triage

Sharing

General

Target

d56751aaf86d740e308a428c9b33d39e78eb884222c42a6004e3449e89730d16
Size

325KB
Sample

221127-cbc4nsfb6s
MD5

a030ac9b3b72dd6d1ef0dc50006f7562
SHA1

cbdbcec83448854527a5a974830e1f785ecb38e4
SHA256

d56751aaf86d740e308a428c9b33d39e78eb884222c42a6004e3449e89730d16
SHA512

d8a732c7d17904538df1be7e6993d797f7244e6648889bf39954c11680f37e75f7466fe232fc75ca8dd90aaf76ab40d88ab2cb7ddf0a2c05e54976cba5801f9f
SSDEEP

6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5od:cr1B3u6/eIo4ArVUBQCCYOqmO5od

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d56751aaf86d740e308a428c9b33d39e78eb884222c42a6004e3449e89730d16
- Size
  
  325KB
- MD5
  
  a030ac9b3b72dd6d1ef0dc50006f7562
- SHA1
  
  cbdbcec83448854527a5a974830e1f785ecb38e4
- SHA256
  
  d56751aaf86d740e308a428c9b33d39e78eb884222c42a6004e3449e89730d16
- SHA512
  
  d8a732c7d17904538df1be7e6993d797f7244e6648889bf39954c11680f37e75f7466fe232fc75ca8dd90aaf76ab40d88ab2cb7ddf0a2c05e54976cba5801f9f
- SSDEEP
  
  6144:cr1Bh9uEo2S1YnQmCX492DkwNP3qpYFDcYgQUskKWeFCEQOiCYOqmO5od:cr1B3u6/eIo4ArVUBQCCYOqmO5od
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2