10f46c9a7c894d58541b30a0df7d0caf13bc0b51efc57ac5209da9b7129709ea | Triage

Sharing

General

Target

10f46c9a7c894d58541b30a0df7d0caf13bc0b51efc57ac5209da9b7129709ea
Size

828KB
Sample

221125-w4dqfseh27
MD5

f281af680bdcec04f29488a5c253f425
SHA1

0848d24fdc283a5b19ed22e4c9d12c918723a0c2
SHA256

10f46c9a7c894d58541b30a0df7d0caf13bc0b51efc57ac5209da9b7129709ea
SHA512

a5f47903fd03d78d815f23fa274391515aee720625c6bced0496edb86d078ef1456a20f8feb5c29da5b04672b5e1896b1c1aaa4ba51f3d399b1d36b8860d810e
SSDEEP

24576:mDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPU:WFhwFzPBYb02y4SA5MV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  10f46c9a7c894d58541b30a0df7d0caf13bc0b51efc57ac5209da9b7129709ea
- Size
  
  828KB
- MD5
  
  f281af680bdcec04f29488a5c253f425
- SHA1
  
  0848d24fdc283a5b19ed22e4c9d12c918723a0c2
- SHA256
  
  10f46c9a7c894d58541b30a0df7d0caf13bc0b51efc57ac5209da9b7129709ea
- SHA512
  
  a5f47903fd03d78d815f23fa274391515aee720625c6bced0496edb86d078ef1456a20f8feb5c29da5b04672b5e1896b1c1aaa4ba51f3d399b1d36b8860d810e
- SSDEEP
  
  24576:mDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPU:WFhwFzPBYb02y4SA5MV
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2