f89a1ab108166d1802ef4fcdc7e62fd5b3e011b7ef469f56d0c0dbfcc10d3e87 | Triage

Sharing

General

Target

f89a1ab108166d1802ef4fcdc7e62fd5b3e011b7ef469f56d0c0dbfcc10d3e87
Size

677KB
Sample

221126-31yd1shg5t
MD5

68929cef2d5a86231b72238d394fbcbd
SHA1

a0f35c0cacf6f1c4def3d98ee2bb1bffb9595663
SHA256

f89a1ab108166d1802ef4fcdc7e62fd5b3e011b7ef469f56d0c0dbfcc10d3e87
SHA512

065f8ef5b8da8ab5aa5ad3992489b9716d1a00825368657101539e80629a772a2bc0899c07d238d63b5f74150db018c1b241225290bca6fea101167324410caa
SSDEEP

12288:KTvrHLcyE/l+wkSAl3RpcBZscucL/i/QcuUdvY8eS4tM2xbW:KTvrHtE/ds3rckia4cBdvb4BM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f89a1ab108166d1802ef4fcdc7e62fd5b3e011b7ef469f56d0c0dbfcc10d3e87
- Size
  
  677KB
- MD5
  
  68929cef2d5a86231b72238d394fbcbd
- SHA1
  
  a0f35c0cacf6f1c4def3d98ee2bb1bffb9595663
- SHA256
  
  f89a1ab108166d1802ef4fcdc7e62fd5b3e011b7ef469f56d0c0dbfcc10d3e87
- SHA512
  
  065f8ef5b8da8ab5aa5ad3992489b9716d1a00825368657101539e80629a772a2bc0899c07d238d63b5f74150db018c1b241225290bca6fea101167324410caa
- SSDEEP
  
  12288:KTvrHLcyE/l+wkSAl3RpcBZscucL/i/QcuUdvY8eS4tM2xbW:KTvrHtE/ds3rckia4cBdvb4BM
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2