92ff859c5b48f8494ff7e39d5a95f8285299b69184d0762d0fb812f9b8a16905 | Triage

Sharing

General

Target

92ff859c5b48f8494ff7e39d5a95f8285299b69184d0762d0fb812f9b8a16905
Size

303KB
Sample

221206-s738qsbd93
MD5

a8277c34f5e3ec89c4d49ef1901f1a35
SHA1

217ce01d56a1c094039f6fac36dee7d36e4e8df4
SHA256

92ff859c5b48f8494ff7e39d5a95f8285299b69184d0762d0fb812f9b8a16905
SHA512

80c96828b3932c4a29f672492dc1685d9a0dbc48f5574f9f41b6c4b47cd69a9cbad7d45d3115c3776d1c0b6c054a56bc5ad092e67e4587643a6f37188594327e
SSDEEP

6144:drkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7Z:drkX63yRl1uqM+gs+2RLTf+QLShvQx7Z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  92ff859c5b48f8494ff7e39d5a95f8285299b69184d0762d0fb812f9b8a16905
- Size
  
  303KB
- MD5
  
  a8277c34f5e3ec89c4d49ef1901f1a35
- SHA1
  
  217ce01d56a1c094039f6fac36dee7d36e4e8df4
- SHA256
  
  92ff859c5b48f8494ff7e39d5a95f8285299b69184d0762d0fb812f9b8a16905
- SHA512
  
  80c96828b3932c4a29f672492dc1685d9a0dbc48f5574f9f41b6c4b47cd69a9cbad7d45d3115c3776d1c0b6c054a56bc5ad092e67e4587643a6f37188594327e
- SSDEEP
  
  6144:drkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7Z:drkX63yRl1uqM+gs+2RLTf+QLShvQx7Z
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2