304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c | Triage

Sharing

General

Target

304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c
Size

1.8MB
Sample

221029-fwthyacdb2
MD5

171b5e27d3a632a4fd2a0cae6a22bb40
SHA1

f1f0f10cc356ad257491cd8760d82da4ded45e1e
SHA256

304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c
SHA512

12f0e7cf9ce1b5e2c647a3e4a7a8b9d35e385080430f186fe8fd4ae93c9b1d89d441ef47a20f4cd3259f391f8ae293289311854b43f211e1a18620c4c47cc403
SSDEEP

49152:Ib+u9lgqaacOW2T/HAKoOjc3bdi4HhP4tcYyBr:Ib6qa12TIa0Zi4BgtGBr

Score

7^/10

Malware Config

Targets

- Target
  
  304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c
- Size
  
  1.8MB
- MD5
  
  171b5e27d3a632a4fd2a0cae6a22bb40
- SHA1
  
  f1f0f10cc356ad257491cd8760d82da4ded45e1e
- SHA256
  
  304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c
- SHA512
  
  12f0e7cf9ce1b5e2c647a3e4a7a8b9d35e385080430f186fe8fd4ae93c9b1d89d441ef47a20f4cd3259f391f8ae293289311854b43f211e1a18620c4c47cc403
- SSDEEP
  
  49152:Ib+u9lgqaacOW2T/HAKoOjc3bdi4HhP4tcYyBr:Ib6qa12TIa0Zi4BgtGBr
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2