e3cc954a428e6136d081618c477cbec3589e291c326059f406b06665c7f420af | Triage

Sharing

General

Target

e3cc954a428e6136d081618c477cbec3589e291c326059f406b06665c7f420af
Size

1.0MB
Sample

221126-2kp72aae86
MD5

d70988f780959fe608584d124d380fb3
SHA1

ba5581d030213bbb52ea6927f0b3f360a2a3ce43
SHA256

e3cc954a428e6136d081618c477cbec3589e291c326059f406b06665c7f420af
SHA512

7bb5d03790296197ecb3d97e0513b8926338bf6dc8b6bafee3b11549a4a95ddc28b10234d39ba89f16599c8fafce9987f4fa09e029c2cc5ff621bfc6d6068ff2
SSDEEP

24576:/QP1WIt/PcyQzktVF72ofLFCQUeXkS96WJW0L:I9WiHcWFdFCBk9vWa

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e3cc954a428e6136d081618c477cbec3589e291c326059f406b06665c7f420af
- Size
  
  1.0MB
- MD5
  
  d70988f780959fe608584d124d380fb3
- SHA1
  
  ba5581d030213bbb52ea6927f0b3f360a2a3ce43
- SHA256
  
  e3cc954a428e6136d081618c477cbec3589e291c326059f406b06665c7f420af
- SHA512
  
  7bb5d03790296197ecb3d97e0513b8926338bf6dc8b6bafee3b11549a4a95ddc28b10234d39ba89f16599c8fafce9987f4fa09e029c2cc5ff621bfc6d6068ff2
- SSDEEP
  
  24576:/QP1WIt/PcyQzktVF72ofLFCQUeXkS96WJW0L:I9WiHcWFdFCBk9vWa
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2