30c28ecc4df96cb9a01362070fe6f9c4885d66fd413f1f554bbb9caf9b942a5d | Triage

Sharing

General

Target

30c28ecc4df96cb9a01362070fe6f9c4885d66fd413f1f554bbb9caf9b942a5d
Size

84KB
Sample

221107-zhmb9aggd8
MD5

0537ece351b1d190c8027904e46bb321
SHA1

64d86b83bfe99f46ff4db3cb2e121ec78192492a
SHA256

30c28ecc4df96cb9a01362070fe6f9c4885d66fd413f1f554bbb9caf9b942a5d
SHA512

27d85b7bb4032a10b5159275b2e1e1215e815b8094eec05fa4ea02996c4b6f57c0cbff4c03b1def31d536b49c75432e5c35a1cca33c3ac2a4ec05272a611cd0b
SSDEEP

1536:uKZLgXB1yyOu7asvpV4GLBeyuiCdyxoGu:CFW4T4qBeUod

Score

6^/10

Malware Config

Targets

- Target
  
  30c28ecc4df96cb9a01362070fe6f9c4885d66fd413f1f554bbb9caf9b942a5d
- Size
  
  84KB
- MD5
  
  0537ece351b1d190c8027904e46bb321
- SHA1
  
  64d86b83bfe99f46ff4db3cb2e121ec78192492a
- SHA256
  
  30c28ecc4df96cb9a01362070fe6f9c4885d66fd413f1f554bbb9caf9b942a5d
- SHA512
  
  27d85b7bb4032a10b5159275b2e1e1215e815b8094eec05fa4ea02996c4b6f57c0cbff4c03b1def31d536b49c75432e5c35a1cca33c3ac2a4ec05272a611cd0b
- SSDEEP
  
  1536:uKZLgXB1yyOu7asvpV4GLBeyuiCdyxoGu:CFW4T4qBeUod
Score

6^/10
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2