f198dd75d30bffece8a5b0ef0a010b13652ece2204d7cd1c4415ecb799d6239d | Triage

Sharing

General

Target

f198dd75d30bffece8a5b0ef0a010b13652ece2204d7cd1c4415ecb799d6239d
Size

1.1MB
Sample

221126-18lzvada3z
MD5

3001ff53334247fea3fc1fd2953e7748
SHA1

1d2180a7bad7cfabb89f26b0eb45f54749d4ea61
SHA256

f198dd75d30bffece8a5b0ef0a010b13652ece2204d7cd1c4415ecb799d6239d
SHA512

5ff9a5e8a52ea8ea6630545bddf0a44eba875a6dd37e7621b4e06266dee90aa495e40098b3cf1b7fc89faf32e9deeb5c8d97e6a8e29dc167d704a39347a72e75
SSDEEP

24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8prh:jWtbKELB6rhW8hh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f198dd75d30bffece8a5b0ef0a010b13652ece2204d7cd1c4415ecb799d6239d
- Size
  
  1.1MB
- MD5
  
  3001ff53334247fea3fc1fd2953e7748
- SHA1
  
  1d2180a7bad7cfabb89f26b0eb45f54749d4ea61
- SHA256
  
  f198dd75d30bffece8a5b0ef0a010b13652ece2204d7cd1c4415ecb799d6239d
- SHA512
  
  5ff9a5e8a52ea8ea6630545bddf0a44eba875a6dd37e7621b4e06266dee90aa495e40098b3cf1b7fc89faf32e9deeb5c8d97e6a8e29dc167d704a39347a72e75
- SSDEEP
  
  24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8prh:jWtbKELB6rhW8hh
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2