4843ba74c1015f9b647f905e1c04c0a2c543218f793d883fdd22fc7e315281ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4843ba74c1015f9b647f905e1c04c0a2c543218f793d883fdd22fc7e315281ff
Size

759KB
Sample

221020-bsat7sgec2
MD5

a8b5c485b2875c8e24925ad08776b0c9
SHA1

ef52acf4f21b5cc1f9ac3202d98861eecd29b28b
SHA256

4843ba74c1015f9b647f905e1c04c0a2c543218f793d883fdd22fc7e315281ff
SHA512

c687be18a8ba95e1c88719d0e3f38a943b567437aecf7c1ce48d25d576f8e34e5a80ac19cddf383d576539cbef69ebdb304ddff096c6649df80b8585df94d3e0
SSDEEP

12288:LxqJ8fCHmdVSZzzDeOrCIso5rVp0SHjrUbhL5:a8aH+SZTVpsopL0SHkbhL5

Score

7^/10

Malware Config

Targets

- Target
  
  4843ba74c1015f9b647f905e1c04c0a2c543218f793d883fdd22fc7e315281ff
- Size
  
  759KB
- MD5
  
  a8b5c485b2875c8e24925ad08776b0c9
- SHA1
  
  ef52acf4f21b5cc1f9ac3202d98861eecd29b28b
- SHA256
  
  4843ba74c1015f9b647f905e1c04c0a2c543218f793d883fdd22fc7e315281ff
- SHA512
  
  c687be18a8ba95e1c88719d0e3f38a943b567437aecf7c1ce48d25d576f8e34e5a80ac19cddf383d576539cbef69ebdb304ddff096c6649df80b8585df94d3e0
- SSDEEP
  
  12288:LxqJ8fCHmdVSZzzDeOrCIso5rVp0SHjrUbhL5:a8aH+SZTVpsopL0SHkbhL5
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2