b6aa71c6bbb57de3f6469c8ecd02219feacc935f1a144487d9255b42f1046cc1 | Triage

Sharing

General

Target

b6aa71c6bbb57de3f6469c8ecd02219feacc935f1a144487d9255b42f1046cc1
Size

304KB
Sample

221128-a3tvdsbe78
MD5

cad688e8a1b7d37c3649e2b54a888f67
SHA1

ee9a2c9e9e6f9c65c55cc07e7de90c6e03b70590
SHA256

b6aa71c6bbb57de3f6469c8ecd02219feacc935f1a144487d9255b42f1046cc1
SHA512

7a23f5bd33d15a5614a1a8c44193c0e72f2f5420a291d03fac801382900523dc83b057a8dbbf83461cf4cdc14a7b46f62da42015dd7c2d4a5cc3e47e973e00e7
SSDEEP

6144:1rkx9uEo2S1YnQmCX492DkwNP3qpYFkXdlP5IO5/OoCVHuy6SHZ86riVZkiizn:1rkHu6/eIo4RXdrIO5/OpVHd6Ky6rizy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b6aa71c6bbb57de3f6469c8ecd02219feacc935f1a144487d9255b42f1046cc1
- Size
  
  304KB
- MD5
  
  cad688e8a1b7d37c3649e2b54a888f67
- SHA1
  
  ee9a2c9e9e6f9c65c55cc07e7de90c6e03b70590
- SHA256
  
  b6aa71c6bbb57de3f6469c8ecd02219feacc935f1a144487d9255b42f1046cc1
- SHA512
  
  7a23f5bd33d15a5614a1a8c44193c0e72f2f5420a291d03fac801382900523dc83b057a8dbbf83461cf4cdc14a7b46f62da42015dd7c2d4a5cc3e47e973e00e7
- SSDEEP
  
  6144:1rkx9uEo2S1YnQmCX492DkwNP3qpYFkXdlP5IO5/OoCVHuy6SHZ86riVZkiizn:1rkHu6/eIo4RXdrIO5/OpVHd6Ky6rizy
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2