ab69160426cae5baaeae7bcc015aef01b763a509d060d489e7e08f6cb49ddc40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab69160426cae5baaeae7bcc015aef01b763a509d060d489e7e08f6cb49ddc40
Size

703KB
Sample

221107-lza4nadbbm
MD5

5a363e26b65220212826ade629d287cc
SHA1

736acd0f2ae63555d5b3c3a0137c77b552840945
SHA256

ab69160426cae5baaeae7bcc015aef01b763a509d060d489e7e08f6cb49ddc40
SHA512

d5ea783996390ee80b8aa819f27a103707e79687e67545d0f2009ce1d94a42fc6db7d04b02d26576b2bd45e68102f1324cdbfcb2f94ce828b702c6ef9266b6cc
SSDEEP

12288:BHgLxi7Ma55+pDZIWcZWO5RgbdtK15LRCxg1RHeDpMgv4t1goX86r:BHMiAe5aIWiFHktK7eDpMgvO11M6r

Score

7^/10

Malware Config

Targets

- Target
  
  ab69160426cae5baaeae7bcc015aef01b763a509d060d489e7e08f6cb49ddc40
- Size
  
  703KB
- MD5
  
  5a363e26b65220212826ade629d287cc
- SHA1
  
  736acd0f2ae63555d5b3c3a0137c77b552840945
- SHA256
  
  ab69160426cae5baaeae7bcc015aef01b763a509d060d489e7e08f6cb49ddc40
- SHA512
  
  d5ea783996390ee80b8aa819f27a103707e79687e67545d0f2009ce1d94a42fc6db7d04b02d26576b2bd45e68102f1324cdbfcb2f94ce828b702c6ef9266b6cc
- SSDEEP
  
  12288:BHgLxi7Ma55+pDZIWcZWO5RgbdtK15LRCxg1RHeDpMgv4t1goX86r:BHMiAe5aIWiFHktK7eDpMgvO11M6r
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2