645550b7a97eb5fd6af8e257e85033fae56a5d6e5834bc0df427a836099beb2e | Triage

Sharing

General

Target

645550b7a97eb5fd6af8e257e85033fae56a5d6e5834bc0df427a836099beb2e
Size

1.1MB
Sample

221029-fb8r5abeh3
MD5

9cd04534afe07e6a149591665f8abdd2
SHA1

563fca0826bab5dba023429ef350b0c5c0098908
SHA256

645550b7a97eb5fd6af8e257e85033fae56a5d6e5834bc0df427a836099beb2e
SHA512

dc802fec4276abd816777e604862da7276d0168728cde5cbed159ee7f7aaa353f0a5b058c685d43c90e18a55fe5689c3fb3827ce27e3418ce9223078340f3233
SSDEEP

12288:uuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:u3jl2WzbZL6gEAqEVmA7x6FAnc

Score

7^/10

Malware Config

Targets

- Target
  
  645550b7a97eb5fd6af8e257e85033fae56a5d6e5834bc0df427a836099beb2e
- Size
  
  1.1MB
- MD5
  
  9cd04534afe07e6a149591665f8abdd2
- SHA1
  
  563fca0826bab5dba023429ef350b0c5c0098908
- SHA256
  
  645550b7a97eb5fd6af8e257e85033fae56a5d6e5834bc0df427a836099beb2e
- SHA512
  
  dc802fec4276abd816777e604862da7276d0168728cde5cbed159ee7f7aaa353f0a5b058c685d43c90e18a55fe5689c3fb3827ce27e3418ce9223078340f3233
- SSDEEP
  
  12288:uuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:u3jl2WzbZL6gEAqEVmA7x6FAnc
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2