11a107148f273d92e6fb5bbb458711e2d1d50d893391c7a1ea6c2e47550fe7b7 | Triage

Sharing

General

Target

11a107148f273d92e6fb5bbb458711e2d1d50d893391c7a1ea6c2e47550fe7b7
Size

1.1MB
Sample

221126-1kj6cabb3t
MD5

8d34ed681a631eb585dee9ac8b09a044
SHA1

62c863df646dda37514e1d4197386a2c11236d50
SHA256

11a107148f273d92e6fb5bbb458711e2d1d50d893391c7a1ea6c2e47550fe7b7
SHA512

dee1c54a5a4e9834990d2e94ac6d13df8a38c62568c70c0645407bb9fc576186d5fa1abba8ee5f4be863920d1ecb0a9e7e7e866923bca853171a127c7d5549ea
SSDEEP

24576:T8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:TWtbKELB6rhW8h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  11a107148f273d92e6fb5bbb458711e2d1d50d893391c7a1ea6c2e47550fe7b7
- Size
  
  1.1MB
- MD5
  
  8d34ed681a631eb585dee9ac8b09a044
- SHA1
  
  62c863df646dda37514e1d4197386a2c11236d50
- SHA256
  
  11a107148f273d92e6fb5bbb458711e2d1d50d893391c7a1ea6c2e47550fe7b7
- SHA512
  
  dee1c54a5a4e9834990d2e94ac6d13df8a38c62568c70c0645407bb9fc576186d5fa1abba8ee5f4be863920d1ecb0a9e7e7e866923bca853171a127c7d5549ea
- SSDEEP
  
  24576:T8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:TWtbKELB6rhW8h
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2