498578a9bf028fc0e5eec29d186cf409617a1e0b33d4beb9b882fd65b9482a3d | Triage

Sharing

General

Target

498578a9bf028fc0e5eec29d186cf409617a1e0b33d4beb9b882fd65b9482a3d
Size

313KB
Sample

221127-levybsba6s
MD5

f12892d46941e9ffa6e2c260d9d8f0b7
SHA1

4e3ea90458902401597d9d57d9f63fc10e46e587
SHA256

498578a9bf028fc0e5eec29d186cf409617a1e0b33d4beb9b882fd65b9482a3d
SHA512

7cae3d5ec4842f3c33ed8830af9fce2a2e54d5e02ad8fbdee12bf89e039a4f98e3aa58b39220059f1aff3c4c1980a77df93a4b32c02aa507150be4e6d5cd70c7
SSDEEP

6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lu:Xryu6/eIo4vMResyEf0uP9d9UG0u

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  498578a9bf028fc0e5eec29d186cf409617a1e0b33d4beb9b882fd65b9482a3d
- Size
  
  313KB
- MD5
  
  f12892d46941e9ffa6e2c260d9d8f0b7
- SHA1
  
  4e3ea90458902401597d9d57d9f63fc10e46e587
- SHA256
  
  498578a9bf028fc0e5eec29d186cf409617a1e0b33d4beb9b882fd65b9482a3d
- SHA512
  
  7cae3d5ec4842f3c33ed8830af9fce2a2e54d5e02ad8fbdee12bf89e039a4f98e3aa58b39220059f1aff3c4c1980a77df93a4b32c02aa507150be4e6d5cd70c7
- SSDEEP
  
  6144:XrK9uEo2S1YnQmCX492DkwNP3qpYFtcM7dZssr+Ixf6LuDTKD2ay9KGYG0Lu:Xryu6/eIo4vMResyEf0uP9d9UG0u
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2