b1f4cbc2f9569ac9fb1438431064eb3e68197c097c95936a6f078ae3093a9583 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1f4cbc2f9569ac9fb1438431064eb3e68197c097c95936a6f078ae3093a9583
Size

313KB
Sample

221127-lr81qagb94
MD5

bb3594f56eca37e7e4b6292e1013e6c7
SHA1

a012105f660e67109ec51598a69a4f78cb2b7124
SHA256

b1f4cbc2f9569ac9fb1438431064eb3e68197c097c95936a6f078ae3093a9583
SHA512

9edbaf390fb43db4054468dbcb5c7bd27d57c65c92f8df9798bc6a3b713f300c35e002d1c5ff9693aa36056fa9990be92f28ee6be5c780f79dcd5ac328044807
SSDEEP

6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijY0l:4rk4u6/eIo4nlu7trxFtApfgMyrpjYC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b1f4cbc2f9569ac9fb1438431064eb3e68197c097c95936a6f078ae3093a9583
- Size
  
  313KB
- MD5
  
  bb3594f56eca37e7e4b6292e1013e6c7
- SHA1
  
  a012105f660e67109ec51598a69a4f78cb2b7124
- SHA256
  
  b1f4cbc2f9569ac9fb1438431064eb3e68197c097c95936a6f078ae3093a9583
- SHA512
  
  9edbaf390fb43db4054468dbcb5c7bd27d57c65c92f8df9798bc6a3b713f300c35e002d1c5ff9693aa36056fa9990be92f28ee6be5c780f79dcd5ac328044807
- SSDEEP
  
  6144:4rkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijY0l:4rk4u6/eIo4nlu7trxFtApfgMyrpjYC
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2