05710de7a13264c320d659b40c87015f528ade2a5ef44903fe644298241365c1 | Triage

Sharing

General

Target

20bc0e873c2b07b2b917a610af2ad1c6
Size

313KB
Sample

231225-byckzsaehr
MD5

20bc0e873c2b07b2b917a610af2ad1c6
SHA1

b9c0f51c75868ee1d71131349e9cf78eae76f797
SHA256

05710de7a13264c320d659b40c87015f528ade2a5ef44903fe644298241365c1
SHA512

22dc34c034b4cbbaea439b4a137fe83c78c7d0168966ddee11d1a11c4d152fa824c8661e527dd026f55aa169924c208695589a272d80ea1b1d8530ecd4a93ffe
SSDEEP

6144:4rJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDR:4rfu6/eIo4jVW5soVCcQovoO0DJM+E+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  20bc0e873c2b07b2b917a610af2ad1c6
- Size
  
  313KB
- MD5
  
  20bc0e873c2b07b2b917a610af2ad1c6
- SHA1
  
  b9c0f51c75868ee1d71131349e9cf78eae76f797
- SHA256
  
  05710de7a13264c320d659b40c87015f528ade2a5ef44903fe644298241365c1
- SHA512
  
  22dc34c034b4cbbaea439b4a137fe83c78c7d0168966ddee11d1a11c4d152fa824c8661e527dd026f55aa169924c208695589a272d80ea1b1d8530ecd4a93ffe
- SSDEEP
  
  6144:4rJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDR:4rfu6/eIo4jVW5soVCcQovoO0DJM+E+
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2