General

  • Target

    332a15e80edb981b5c1708050f786d61ac29f2dc9c54779ac629fd4bdb2025fc

  • Size

    828KB

  • Sample

    221126-e4yl7aca46

  • MD5

    fe9bd69489bab6dddfb95e963361b96a

  • SHA1

    de89813aba45d85183229caa70e5dc1bed237eba

  • SHA256

    332a15e80edb981b5c1708050f786d61ac29f2dc9c54779ac629fd4bdb2025fc

  • SHA512

    bade4ec8e279068cc2dbc33853efc57d164f86475b571f08eb3e245fee7fdd408e1c7234977218d417d48ea07037c42fb8af19faa88f5f82c64d63bc47ffc220

  • SSDEEP

    24576:wDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwP5:MFhwFzPBYb02y4SA5M8

Score
7/10

Malware Config

Targets

    • Target

      332a15e80edb981b5c1708050f786d61ac29f2dc9c54779ac629fd4bdb2025fc

    • Size

      828KB

    • MD5

      fe9bd69489bab6dddfb95e963361b96a

    • SHA1

      de89813aba45d85183229caa70e5dc1bed237eba

    • SHA256

      332a15e80edb981b5c1708050f786d61ac29f2dc9c54779ac629fd4bdb2025fc

    • SHA512

      bade4ec8e279068cc2dbc33853efc57d164f86475b571f08eb3e245fee7fdd408e1c7234977218d417d48ea07037c42fb8af19faa88f5f82c64d63bc47ffc220

    • SSDEEP

      24576:wDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwP5:MFhwFzPBYb02y4SA5M8

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Tasks