20bed26406c539ffe83720ebaec58753f00fc77d150e1dada7574e0d83135852 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b1d12fc470189a4b1ff376d4115888d
Size

313KB
Sample

231225-y54z5sagd9
MD5

3b1d12fc470189a4b1ff376d4115888d
SHA1

95e41bf421a590aeb8758dc0a06e0b9adafe7eee
SHA256

20bed26406c539ffe83720ebaec58753f00fc77d150e1dada7574e0d83135852
SHA512

f556420681f86f9210f449daceaadb0756e42215ea66f7b7570489c54fafc9bca733654ee29ff3fdb627de3a14c3a12e48b78f911af994a32d3b7e3a180274da
SSDEEP

6144:grkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYx:grk4u6/eIo4nlu7trxFtApfgMyrpjYx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3b1d12fc470189a4b1ff376d4115888d
- Size
  
  313KB
- MD5
  
  3b1d12fc470189a4b1ff376d4115888d
- SHA1
  
  95e41bf421a590aeb8758dc0a06e0b9adafe7eee
- SHA256
  
  20bed26406c539ffe83720ebaec58753f00fc77d150e1dada7574e0d83135852
- SHA512
  
  f556420681f86f9210f449daceaadb0756e42215ea66f7b7570489c54fafc9bca733654ee29ff3fdb627de3a14c3a12e48b78f911af994a32d3b7e3a180274da
- SSDEEP
  
  6144:grkA9uEo2S1YnQmCX492DkwNP3qpYF0lu7tIYxFtApNhiYLE2/5yr3+LijYx:grk4u6/eIo4nlu7trxFtApfgMyrpjYx
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2