113d2b3b8e0cebe038d238c9261791124469e2d7c522670e505e709013d24baf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

113d2b3b8e0cebe038d238c9261791124469e2d7c522670e505e709013d24baf
Size

60KB
Sample

221019-twa89afhbl
MD5

a18b193ac1a47c9d4a57a176188646f0
SHA1

0681e775f361ff5308a940554262bf57fa4debd6
SHA256

113d2b3b8e0cebe038d238c9261791124469e2d7c522670e505e709013d24baf
SHA512

2ab6997cc88085e277b1ba73a8762f59e2aa15b82dc2832c40be762cd5d1db8eaf565cce0ae0a9beacad2fd9b56e99a973cd6f94f3b5310b5a14eca501b4be16
SSDEEP

1536:jxhrFLOwDEcn1mBD4xUda7GAiPzqet4SVin1xxq:bwuj1spdfZH

Score

6^/10

Malware Config

Targets

- Target
  
  113d2b3b8e0cebe038d238c9261791124469e2d7c522670e505e709013d24baf
- Size
  
  60KB
- MD5
  
  a18b193ac1a47c9d4a57a176188646f0
- SHA1
  
  0681e775f361ff5308a940554262bf57fa4debd6
- SHA256
  
  113d2b3b8e0cebe038d238c9261791124469e2d7c522670e505e709013d24baf
- SHA512
  
  2ab6997cc88085e277b1ba73a8762f59e2aa15b82dc2832c40be762cd5d1db8eaf565cce0ae0a9beacad2fd9b56e99a973cd6f94f3b5310b5a14eca501b4be16
- SSDEEP
  
  1536:jxhrFLOwDEcn1mBD4xUda7GAiPzqet4SVin1xxq:bwuj1spdfZH
Score

6^/10
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2