f9d52b5b2faaf33452f86f71f81e48424efedc9608f250c62950717b5bc0cb9d | Triage

Sharing

General

Target

f9d52b5b2faaf33452f86f71f81e48424efedc9608f250c62950717b5bc0cb9d
Size

1.1MB
Sample

221126-2mkekaeb4y
MD5

3907146804c3080d042a6f1eb903f320
SHA1

dc1c007a3a7b7d47eb1374faf41bfb74229e836c
SHA256

f9d52b5b2faaf33452f86f71f81e48424efedc9608f250c62950717b5bc0cb9d
SHA512

757800989c4e9a7cf760f84e49172b9ef2c9457646e34a2737f5c9f5e6cd2f6a842c28b52c08e853e00bb9a2120cb213acbb61868bdce3705f3842cc724c0a79
SSDEEP

24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:jWtbKELB6rhW8h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f9d52b5b2faaf33452f86f71f81e48424efedc9608f250c62950717b5bc0cb9d
- Size
  
  1.1MB
- MD5
  
  3907146804c3080d042a6f1eb903f320
- SHA1
  
  dc1c007a3a7b7d47eb1374faf41bfb74229e836c
- SHA256
  
  f9d52b5b2faaf33452f86f71f81e48424efedc9608f250c62950717b5bc0cb9d
- SHA512
  
  757800989c4e9a7cf760f84e49172b9ef2c9457646e34a2737f5c9f5e6cd2f6a842c28b52c08e853e00bb9a2120cb213acbb61868bdce3705f3842cc724c0a79
- SSDEEP
  
  24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:jWtbKELB6rhW8h
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2