5d1657140ca1d55a265eb0a0fb80c8c33233d1cf7a0861983173df05b262de18 | Triage

Sharing

General

Target

5d1657140ca1d55a265eb0a0fb80c8c33233d1cf7a0861983173df05b262de18
Size

221KB
Sample

221020-enw4esdcg6
MD5

805f6e899715f7b8267f63190ff5ff00
SHA1

568a4680edea17e98179c6bbdeb45c6c1ff6b80d
SHA256

5d1657140ca1d55a265eb0a0fb80c8c33233d1cf7a0861983173df05b262de18
SHA512

8af6bad6c5d07dfc848a2ed6a06d6ef4396742cf2296264ef625f5b23f0819fcfad8ef790ff1f97ffa5981aa3d90ff7eeae2af3a4c5199552bee2610415cf7a0
SSDEEP

6144:y8ispeIyKNIuO5BjGz/Hlnh9qEAIDQG5jwMeoj55:NispLyKNId5B6BhdQaj7e25

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  5d1657140ca1d55a265eb0a0fb80c8c33233d1cf7a0861983173df05b262de18
- Size
  
  221KB
- MD5
  
  805f6e899715f7b8267f63190ff5ff00
- SHA1
  
  568a4680edea17e98179c6bbdeb45c6c1ff6b80d
- SHA256
  
  5d1657140ca1d55a265eb0a0fb80c8c33233d1cf7a0861983173df05b262de18
- SHA512
  
  8af6bad6c5d07dfc848a2ed6a06d6ef4396742cf2296264ef625f5b23f0819fcfad8ef790ff1f97ffa5981aa3d90ff7eeae2af3a4c5199552bee2610415cf7a0
- SSDEEP
  
  6144:y8ispeIyKNIuO5BjGz/Hlnh9qEAIDQG5jwMeoj55:NispLyKNId5B6BhdQaj7e25
Score

7^/10

persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2