c9190d5a0f49119a75bef7b04ccc28615e7927fef7255008090ad8f98646ffe3 | Triage

Sharing

General

Target

c9190d5a0f49119a75bef7b04ccc28615e7927fef7255008090ad8f98646ffe3
Size

40KB
Sample

221123-xk5khaac8t
MD5

5ef132e7a7cd94b8bc190451ca638bc0
SHA1

279bf9b4db973dd6941abd4c9d8b2d16c5fa5d74
SHA256

c9190d5a0f49119a75bef7b04ccc28615e7927fef7255008090ad8f98646ffe3
SHA512

7933ec67246c9e015a6e5ce45ad9573cb992bc00dfda3961862cccfe81a053eec8534edfb351413c4784a031da53bd02fcd2c756687d069e54ccacc1b0107440
SSDEEP

768:32gJHw78uR3N3UecXBAmqf2gu4Vf1ID/yjPMTr8MmI:32ghw78q9AymqeUDu

Score

6^/10

Malware Config

Targets

- Target
  
  c9190d5a0f49119a75bef7b04ccc28615e7927fef7255008090ad8f98646ffe3
- Size
  
  40KB
- MD5
  
  5ef132e7a7cd94b8bc190451ca638bc0
- SHA1
  
  279bf9b4db973dd6941abd4c9d8b2d16c5fa5d74
- SHA256
  
  c9190d5a0f49119a75bef7b04ccc28615e7927fef7255008090ad8f98646ffe3
- SHA512
  
  7933ec67246c9e015a6e5ce45ad9573cb992bc00dfda3961862cccfe81a053eec8534edfb351413c4784a031da53bd02fcd2c756687d069e54ccacc1b0107440
- SSDEEP
  
  768:32gJHw78uR3N3UecXBAmqf2gu4Vf1ID/yjPMTr8MmI:32ghw78q9AymqeUDu
Score

6^/10
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2