1c6a976906c0b6f8951a37dd806f9220d200d4c54951d1ac6ea650b919209df3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c6a976906c0b6f8951a37dd806f9220d200d4c54951d1ac6ea650b919209df3
Size

838KB
Sample

221106-lj4q2adhd6
MD5

10b83714de8210be167a86c8a97daf80
SHA1

0ccba7999c7b15fb145a98cbeb821bd2e524e6a6
SHA256

1c6a976906c0b6f8951a37dd806f9220d200d4c54951d1ac6ea650b919209df3
SHA512

d09cd1d2046eadc3417b5ecb3d7409015a8747f2d2a62d03a6a987b0c511e4de6269407cddac495e41c78d757c9e2e592d6a67707dbf6af694dc3f2849abd84b
SSDEEP

12288:uW17poE9ZJtxGDSQISmsh7gu221pfGE72Y30bKtr1SaCC6T6:t1Fo6ZJPVsVgkUE7jNN1hi6

Score

7^/10

Malware Config

Targets

- Target
  
  1c6a976906c0b6f8951a37dd806f9220d200d4c54951d1ac6ea650b919209df3
- Size
  
  838KB
- MD5
  
  10b83714de8210be167a86c8a97daf80
- SHA1
  
  0ccba7999c7b15fb145a98cbeb821bd2e524e6a6
- SHA256
  
  1c6a976906c0b6f8951a37dd806f9220d200d4c54951d1ac6ea650b919209df3
- SHA512
  
  d09cd1d2046eadc3417b5ecb3d7409015a8747f2d2a62d03a6a987b0c511e4de6269407cddac495e41c78d757c9e2e592d6a67707dbf6af694dc3f2849abd84b
- SSDEEP
  
  12288:uW17poE9ZJtxGDSQISmsh7gu221pfGE72Y30bKtr1SaCC6T6:t1Fo6ZJPVsVgkUE7jNN1hi6
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2