bd7df4dc387db3386f99cbf6062b2a629670565824a509b34f531a094c0ba83d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd7df4dc387db3386f99cbf6062b2a629670565824a509b34f531a094c0ba83d
Size

1.1MB
Sample

221126-2wc2vabd44
MD5

a60c8526ddf9d185f1d4e6308171f9ff
SHA1

8cf5cc529cb724749f6ccf9c567d5bb5781567b8
SHA256

bd7df4dc387db3386f99cbf6062b2a629670565824a509b34f531a094c0ba83d
SHA512

8630af40f3ef7ff0f8b48796173485105f1b0c3593745f9b332a9f3a6e112cdce4b4d6f8a81a6972bec7af82c50c15aa4528f686bc0927480af621150af19d7a
SSDEEP

24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8prq:jWtbKELB6rhW8hq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bd7df4dc387db3386f99cbf6062b2a629670565824a509b34f531a094c0ba83d
- Size
  
  1.1MB
- MD5
  
  a60c8526ddf9d185f1d4e6308171f9ff
- SHA1
  
  8cf5cc529cb724749f6ccf9c567d5bb5781567b8
- SHA256
  
  bd7df4dc387db3386f99cbf6062b2a629670565824a509b34f531a094c0ba83d
- SHA512
  
  8630af40f3ef7ff0f8b48796173485105f1b0c3593745f9b332a9f3a6e112cdce4b4d6f8a81a6972bec7af82c50c15aa4528f686bc0927480af621150af19d7a
- SSDEEP
  
  24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8prq:jWtbKELB6rhW8hq
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2