ab4db14afd9db491468775d7d3dfe359952b355fcf1009854ea4afbe5eee080b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab4db14afd9db491468775d7d3dfe359952b355fcf1009854ea4afbe5eee080b
Size

588KB
Sample

221107-m7d1yscgf8
MD5

489690904f34fe6f40872f4c187f6127
SHA1

c6e8ad0fee90be2f14838994785041ba4285f7e7
SHA256

ab4db14afd9db491468775d7d3dfe359952b355fcf1009854ea4afbe5eee080b
SHA512

7a122cf7e66e347f94c49b6b54291cf7da9e17411907bc6f7cffc065255a22862822e38015202ce4ee8ec3942fd8411b9c3877b52c5f9a1a69c3d0277aa0cbcf
SSDEEP

12288:HXznQ+bCxWrUhLZvzC/igEhrNA9SNwyrYAmyhIna3PiGpYh7jQ:qgIh0/iLhrekeKYAl4RNQ

Score

7^/10

Malware Config

Targets

- Target
  
  ab4db14afd9db491468775d7d3dfe359952b355fcf1009854ea4afbe5eee080b
- Size
  
  588KB
- MD5
  
  489690904f34fe6f40872f4c187f6127
- SHA1
  
  c6e8ad0fee90be2f14838994785041ba4285f7e7
- SHA256
  
  ab4db14afd9db491468775d7d3dfe359952b355fcf1009854ea4afbe5eee080b
- SHA512
  
  7a122cf7e66e347f94c49b6b54291cf7da9e17411907bc6f7cffc065255a22862822e38015202ce4ee8ec3942fd8411b9c3877b52c5f9a1a69c3d0277aa0cbcf
- SSDEEP
  
  12288:HXznQ+bCxWrUhLZvzC/igEhrNA9SNwyrYAmyhIna3PiGpYh7jQ:qgIh0/iLhrekeKYAl4RNQ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2