General

  • Target

    35773e1f7fd483e86b56d488ec21458c4540cd95a8b3391e024460a4495fedbd

  • Size

    828KB

  • Sample

    221126-e4hwqsca32

  • MD5

    3e40d33eec5683ae48d570291adfa242

  • SHA1

    7b375534dd7ff9f5363424c678411cdadd7e24e5

  • SHA256

    35773e1f7fd483e86b56d488ec21458c4540cd95a8b3391e024460a4495fedbd

  • SHA512

    aeb6c1724cbd4763d8c99caa05146f0dd2eb2891d1c31b158ea850b17823e44b43d742afca5eb9ac54a82c908749d377a0557ea2f6a404b9c890481d34e096dc

  • SSDEEP

    24576:GDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwP6N:2FhwFzPBYb02y4SA5MF

Score
7/10

Malware Config

Targets

    • Target

      35773e1f7fd483e86b56d488ec21458c4540cd95a8b3391e024460a4495fedbd

    • Size

      828KB

    • MD5

      3e40d33eec5683ae48d570291adfa242

    • SHA1

      7b375534dd7ff9f5363424c678411cdadd7e24e5

    • SHA256

      35773e1f7fd483e86b56d488ec21458c4540cd95a8b3391e024460a4495fedbd

    • SHA512

      aeb6c1724cbd4763d8c99caa05146f0dd2eb2891d1c31b158ea850b17823e44b43d742afca5eb9ac54a82c908749d377a0557ea2f6a404b9c890481d34e096dc

    • SSDEEP

      24576:GDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwP6N:2FhwFzPBYb02y4SA5MF

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Tasks