3fb2bb1680eace4db2d862f871cde0b709f09c9615c5bad96e1470c60becfc54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fb2bb1680eace4db2d862f871cde0b709f09c9615c5bad96e1470c60becfc54
Size

1.2MB
Sample

221126-3atm5sfh21
MD5

2419578379086fcb64f3fc32f745a58d
SHA1

9edbdd97602c2821d0ce1f69737160ccd04c8fac
SHA256

3fb2bb1680eace4db2d862f871cde0b709f09c9615c5bad96e1470c60becfc54
SHA512

ef12fc5c2cfd41aa037a9d2e74f34b490ef5bacafa82c8685b93928fe1b2354598fa46ab02fc403dd124122ace2ac72a5cb496f271fc04762de0a5076dc48df4
SSDEEP

24576:bCStj/R+pud1sQN6TgXxruXQNjj43/qq:9r0C/5XIANvM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3fb2bb1680eace4db2d862f871cde0b709f09c9615c5bad96e1470c60becfc54
- Size
  
  1.2MB
- MD5
  
  2419578379086fcb64f3fc32f745a58d
- SHA1
  
  9edbdd97602c2821d0ce1f69737160ccd04c8fac
- SHA256
  
  3fb2bb1680eace4db2d862f871cde0b709f09c9615c5bad96e1470c60becfc54
- SHA512
  
  ef12fc5c2cfd41aa037a9d2e74f34b490ef5bacafa82c8685b93928fe1b2354598fa46ab02fc403dd124122ace2ac72a5cb496f271fc04762de0a5076dc48df4
- SSDEEP
  
  24576:bCStj/R+pud1sQN6TgXxruXQNjj43/qq:9r0C/5XIANvM
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2