198471d49e1a75b956074e3cdd62ca513dfeb78ec7232547f07a99d855b58f70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

198471d49e1a75b956074e3cdd62ca513dfeb78ec7232547f07a99d855b58f70
Size

1.1MB
Sample

221126-2zz1sabf73
MD5

dfd8a9949a8bc76ea04be74babdc12a9
SHA1

f2b2d6c2b5811ae082d4a734b73d501b0956030e
SHA256

198471d49e1a75b956074e3cdd62ca513dfeb78ec7232547f07a99d855b58f70
SHA512

04d08ff796cf91197a604849cd7888d28b6c3c93d10cce35e3d93d833022a903614e87b725f06c0c1a4519413b885611eddada69079037daa986de8444384824
SSDEEP

24576:z8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:zWtbKELB6rhW8h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  198471d49e1a75b956074e3cdd62ca513dfeb78ec7232547f07a99d855b58f70
- Size
  
  1.1MB
- MD5
  
  dfd8a9949a8bc76ea04be74babdc12a9
- SHA1
  
  f2b2d6c2b5811ae082d4a734b73d501b0956030e
- SHA256
  
  198471d49e1a75b956074e3cdd62ca513dfeb78ec7232547f07a99d855b58f70
- SHA512
  
  04d08ff796cf91197a604849cd7888d28b6c3c93d10cce35e3d93d833022a903614e87b725f06c0c1a4519413b885611eddada69079037daa986de8444384824
- SSDEEP
  
  24576:z8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:zWtbKELB6rhW8h
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2