fbb733c1813eaebca00549e866d93187b8a46a8fc9438ab4db597ce652aa4a40 | Triage

Sharing

General

Target

fbb733c1813eaebca00549e866d93187b8a46a8fc9438ab4db597ce652aa4a40
Size

316KB
Sample

221127-ks7nlshc81
MD5

52fced0f2f05d083488ade925ef45a3d
SHA1

9cddd263b32ee60924cb63095f925690d0f817c7
SHA256

fbb733c1813eaebca00549e866d93187b8a46a8fc9438ab4db597ce652aa4a40
SHA512

6ad8d878ac2fac6ce7d886a57724fdd37ebc7d53614433569760f8c486fa32f5e2aa9111653c812d16b56392d6d063a940f79ac4cc78d3874e1821f726247a2f
SSDEEP

6144:hrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wV1:hrkkuveY3zhlV6tmDxzwV1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fbb733c1813eaebca00549e866d93187b8a46a8fc9438ab4db597ce652aa4a40
- Size
  
  316KB
- MD5
  
  52fced0f2f05d083488ade925ef45a3d
- SHA1
  
  9cddd263b32ee60924cb63095f925690d0f817c7
- SHA256
  
  fbb733c1813eaebca00549e866d93187b8a46a8fc9438ab4db597ce652aa4a40
- SHA512
  
  6ad8d878ac2fac6ce7d886a57724fdd37ebc7d53614433569760f8c486fa32f5e2aa9111653c812d16b56392d6d063a940f79ac4cc78d3874e1821f726247a2f
- SSDEEP
  
  6144:hrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wV1:hrkkuveY3zhlV6tmDxzwV1
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2