2bcb1f1191bd7e50524caa1f7fc7ca09461e88fec5da91729169f39b35f430d4 | Triage

Sharing

General

Target

2bcb1f1191bd7e50524caa1f7fc7ca09461e88fec5da91729169f39b35f430d4
Size

304KB
Sample

221206-tv84wsgd6z
MD5

30c2e66bb0d9cc19e8d68794940548f8
SHA1

3ce019beb2350e39bd51f06a2ebf49fd50e9331b
SHA256

2bcb1f1191bd7e50524caa1f7fc7ca09461e88fec5da91729169f39b35f430d4
SHA512

989c6104223892309096b7d68994daa6545f5266ff808b0b01b92aa91f06f65de42814864b2aa361ea9f18631864e72575b8a7d026f45a6ffba4452baf24413e
SSDEEP

6144:OrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7c:OrkX63yRl1uqM+gs+2RLTf+QLShvQx7c

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2bcb1f1191bd7e50524caa1f7fc7ca09461e88fec5da91729169f39b35f430d4
- Size
  
  304KB
- MD5
  
  30c2e66bb0d9cc19e8d68794940548f8
- SHA1
  
  3ce019beb2350e39bd51f06a2ebf49fd50e9331b
- SHA256
  
  2bcb1f1191bd7e50524caa1f7fc7ca09461e88fec5da91729169f39b35f430d4
- SHA512
  
  989c6104223892309096b7d68994daa6545f5266ff808b0b01b92aa91f06f65de42814864b2aa361ea9f18631864e72575b8a7d026f45a6ffba4452baf24413e
- SSDEEP
  
  6144:OrkX6Y0JQBkQRl7174NpNUM+UHs+h43nRLFJO2t3OEhLSMwcU9P4WbXQx7c:OrkX63yRl1uqM+gs+2RLTf+QLShvQx7c
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2