288af6d4e0d0e414ffc54c5d9bc65744061f2797712763f3f5eef06271221fbd | Triage

Sharing

General

Target

288af6d4e0d0e414ffc54c5d9bc65744061f2797712763f3f5eef06271221fbd
Size

316KB
Sample

221127-lhbzmafe29
MD5

9cbbbacebead7172736a073c5aae16ba
SHA1

cba0eaa26ba3a40e53c30dd9fca4736c49f07e51
SHA256

288af6d4e0d0e414ffc54c5d9bc65744061f2797712763f3f5eef06271221fbd
SHA512

36b47393aafa57a6b0dc3f2ee385c12c10f633f884ad5e40a51a359a1439d8d807826e9a46507308e5dd1af4c65f5943cf947d7a4b1c1989f72acbff529c65cb
SSDEEP

6144:zr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYQ:zr0kuveY3cY1cia66MGd0Vs9BdNH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  288af6d4e0d0e414ffc54c5d9bc65744061f2797712763f3f5eef06271221fbd
- Size
  
  316KB
- MD5
  
  9cbbbacebead7172736a073c5aae16ba
- SHA1
  
  cba0eaa26ba3a40e53c30dd9fca4736c49f07e51
- SHA256
  
  288af6d4e0d0e414ffc54c5d9bc65744061f2797712763f3f5eef06271221fbd
- SHA512
  
  36b47393aafa57a6b0dc3f2ee385c12c10f633f884ad5e40a51a359a1439d8d807826e9a46507308e5dd1af4c65f5943cf947d7a4b1c1989f72acbff529c65cb
- SSDEEP
  
  6144:zr/bUzkuvcBYC47l2xij4YTfpczmap8spMPed0VdtM9BdjhYQ:zr0kuveY3cY1cia66MGd0Vs9BdNH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2