996f483697aeea267e60296a7b85c848caeacda93175af70eede025e7a051506 | Triage

Sharing

General

Target

996f483697aeea267e60296a7b85c848caeacda93175af70eede025e7a051506
Size

1.2MB
Sample

221126-129gkacd81
MD5

d884fe767a4f02601e4b0c152511bdf7
SHA1

4e9a6397f435def8ed3e74c0e9a6fb6a6a9d64cb
SHA256

996f483697aeea267e60296a7b85c848caeacda93175af70eede025e7a051506
SHA512

9ab16cb4fed5b8ec5cd6ef91d81ea12984a070d55b7d8fc6255a7be6f4eae09e8d22cd27da0d90d7be2ca7e3d17813c2724036d20040bf8b7b630ded5a8c8953
SSDEEP

12288:9FClyikG4TObKTKd89j65AAyHQcwffFh0C8LqFtl2cvnGNPep/nEL3OJn8n667k5:Wn4TOOA89m5tyHFLw2c/hp/njJV6sZn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  996f483697aeea267e60296a7b85c848caeacda93175af70eede025e7a051506
- Size
  
  1.2MB
- MD5
  
  d884fe767a4f02601e4b0c152511bdf7
- SHA1
  
  4e9a6397f435def8ed3e74c0e9a6fb6a6a9d64cb
- SHA256
  
  996f483697aeea267e60296a7b85c848caeacda93175af70eede025e7a051506
- SHA512
  
  9ab16cb4fed5b8ec5cd6ef91d81ea12984a070d55b7d8fc6255a7be6f4eae09e8d22cd27da0d90d7be2ca7e3d17813c2724036d20040bf8b7b630ded5a8c8953
- SSDEEP
  
  12288:9FClyikG4TObKTKd89j65AAyHQcwffFh0C8LqFtl2cvnGNPep/nEL3OJn8n667k5:Wn4TOOA89m5tyHFLw2c/hp/njJV6sZn
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2