bc7aaee523188fd3fb6253c93a7fe4d07ef246e47b82859a2c5c15d8e0487005 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc7aaee523188fd3fb6253c93a7fe4d07ef246e47b82859a2c5c15d8e0487005
Size

850KB
Sample

221029-nlhbxsdhg2
MD5

706a427ca801b6d27411a68f1eb57c3d
SHA1

ac1803aaea8f4cffcb9af907c358f8e40323363a
SHA256

bc7aaee523188fd3fb6253c93a7fe4d07ef246e47b82859a2c5c15d8e0487005
SHA512

7796cd6e7cbc81608c9a2e1d773c95ce4b4853dec49acb709c3e7e323f95f7859e7308a5c42763a953ee98fddf6d0d86602bba43fa853b96acdf53c6da70ff50
SSDEEP

24576:tYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvJ:+qaxyDC2JmSoPvikO8J

Score

7^/10

Malware Config

Targets

- Target
  
  bc7aaee523188fd3fb6253c93a7fe4d07ef246e47b82859a2c5c15d8e0487005
- Size
  
  850KB
- MD5
  
  706a427ca801b6d27411a68f1eb57c3d
- SHA1
  
  ac1803aaea8f4cffcb9af907c358f8e40323363a
- SHA256
  
  bc7aaee523188fd3fb6253c93a7fe4d07ef246e47b82859a2c5c15d8e0487005
- SHA512
  
  7796cd6e7cbc81608c9a2e1d773c95ce4b4853dec49acb709c3e7e323f95f7859e7308a5c42763a953ee98fddf6d0d86602bba43fa853b96acdf53c6da70ff50
- SSDEEP
  
  24576:tYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvJ:+qaxyDC2JmSoPvikO8J
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2