General

  • Target

    76719deeb4eda06671855445add1a0b89947b14a0c8164dabcdb48d828f398b2

  • Size

    828KB

  • Sample

    221126-epdcpsec4v

  • MD5

    6564f8a284e1276ac52a22cefc93c00c

  • SHA1

    739c00d322490fd277cb20280122474f7e6bc3d2

  • SHA256

    76719deeb4eda06671855445add1a0b89947b14a0c8164dabcdb48d828f398b2

  • SHA512

    e508f3cbf2ba5b21885ee32a66fa017ee295bc996a74b1bda98fa81f29e81147dd0ec8a319d3e9c77135e814ca4ecd4dc863e3d7ffc67d47ba5e583b80526e91

  • SSDEEP

    24576:WDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPo:GFhwFzPBYb02y4SA5MZ

Score
7/10

Malware Config

Targets

    • Target

      76719deeb4eda06671855445add1a0b89947b14a0c8164dabcdb48d828f398b2

    • Size

      828KB

    • MD5

      6564f8a284e1276ac52a22cefc93c00c

    • SHA1

      739c00d322490fd277cb20280122474f7e6bc3d2

    • SHA256

      76719deeb4eda06671855445add1a0b89947b14a0c8164dabcdb48d828f398b2

    • SHA512

      e508f3cbf2ba5b21885ee32a66fa017ee295bc996a74b1bda98fa81f29e81147dd0ec8a319d3e9c77135e814ca4ecd4dc863e3d7ffc67d47ba5e583b80526e91

    • SSDEEP

      24576:WDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPo:GFhwFzPBYb02y4SA5MZ

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Tasks