b2d8ab33288b2ea2197cdfc46a04d1a434d824db245d414de49f3ecd8ed1dca6 | Triage

Sharing

General

Target

b2d8ab33288b2ea2197cdfc46a04d1a434d824db245d414de49f3ecd8ed1dca6
Size

314KB
Sample

221127-k61gfsac9s
MD5

485ae62d8b3c84aeef04bdf761972b7e
SHA1

b4683371810c8e670ff73b6cc170c57d44a5a165
SHA256

b2d8ab33288b2ea2197cdfc46a04d1a434d824db245d414de49f3ecd8ed1dca6
SHA512

fe72e408ce042c0d5500cc0346ce6f398c9411b443931408a5b47bd7756e9bc2502b7bfa16ee8fa1d51d5628d911548177e74f72fb8436542a04bf8b90852364
SSDEEP

6144:4rAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwk:4r1kuveY35YO67Wxz7wk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b2d8ab33288b2ea2197cdfc46a04d1a434d824db245d414de49f3ecd8ed1dca6
- Size
  
  314KB
- MD5
  
  485ae62d8b3c84aeef04bdf761972b7e
- SHA1
  
  b4683371810c8e670ff73b6cc170c57d44a5a165
- SHA256
  
  b2d8ab33288b2ea2197cdfc46a04d1a434d824db245d414de49f3ecd8ed1dca6
- SHA512
  
  fe72e408ce042c0d5500cc0346ce6f398c9411b443931408a5b47bd7756e9bc2502b7bfa16ee8fa1d51d5628d911548177e74f72fb8436542a04bf8b90852364
- SSDEEP
  
  6144:4rAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRwk:4r1kuveY35YO67Wxz7wk
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2