219f902b79bf87fbb590c72a27733f81109699cfae27e45d1c843c93f230e42f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

219f902b79bf87fbb590c72a27733f81109699cfae27e45d1c843c93f230e42f
Size

1.1MB
Sample

221126-2h2s2sad75
MD5

4cc8170a34c96cca461f06929fe985f5
SHA1

f93a0daddaa35e91ec80e30f67ca47b18ff44c89
SHA256

219f902b79bf87fbb590c72a27733f81109699cfae27e45d1c843c93f230e42f
SHA512

a883357ba810738339ed1ab5e1f9a78ad7047fed1dd0a4caa528ee8e01f14cab26134f95f811d10900153f1112e027d3794c31cc63d18072d8b53d8de2e267e0
SSDEEP

24576:T8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:TWtbKELB6rhW8h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  219f902b79bf87fbb590c72a27733f81109699cfae27e45d1c843c93f230e42f
- Size
  
  1.1MB
- MD5
  
  4cc8170a34c96cca461f06929fe985f5
- SHA1
  
  f93a0daddaa35e91ec80e30f67ca47b18ff44c89
- SHA256
  
  219f902b79bf87fbb590c72a27733f81109699cfae27e45d1c843c93f230e42f
- SHA512
  
  a883357ba810738339ed1ab5e1f9a78ad7047fed1dd0a4caa528ee8e01f14cab26134f95f811d10900153f1112e027d3794c31cc63d18072d8b53d8de2e267e0
- SSDEEP
  
  24576:T8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:TWtbKELB6rhW8h
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2