580484eefa74a64393745df6f48522ff451dcf70b982917e557fd4d5c7d092dd | Triage

Sharing

General

Target

580484eefa74a64393745df6f48522ff451dcf70b982917e557fd4d5c7d092dd
Size

1.1MB
Sample

221126-2x9gfabe56
MD5

6c6ed98b597309a5441fab4ac2d30f22
SHA1

5c9eea12d0c42b09882276d819f31196123dea38
SHA256

580484eefa74a64393745df6f48522ff451dcf70b982917e557fd4d5c7d092dd
SHA512

40f19aa59006a4a6045aef65f374f56e6c55c47caa5d4d8a571d6e0c0d39279c56fb2b1ad191292caa98a43e77ea4d00c86de27ef22b3604693c0ee242f0df23
SSDEEP

24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8prW:jWtbKELB6rhW8hW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  580484eefa74a64393745df6f48522ff451dcf70b982917e557fd4d5c7d092dd
- Size
  
  1.1MB
- MD5
  
  6c6ed98b597309a5441fab4ac2d30f22
- SHA1
  
  5c9eea12d0c42b09882276d819f31196123dea38
- SHA256
  
  580484eefa74a64393745df6f48522ff451dcf70b982917e557fd4d5c7d092dd
- SHA512
  
  40f19aa59006a4a6045aef65f374f56e6c55c47caa5d4d8a571d6e0c0d39279c56fb2b1ad191292caa98a43e77ea4d00c86de27ef22b3604693c0ee242f0df23
- SSDEEP
  
  24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8prW:jWtbKELB6rhW8hW
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2