General

  • Target

    6346e469fd7955c581d376222e79eff370451976e50d780c2e89a2defe8fd637

  • Size

    828KB

  • Sample

    221126-etca7sbc26

  • MD5

    7aa768327aeb27581ae275dd83f4a58f

  • SHA1

    30acffa01877a6e0e7f3924ae24f20c353b4e1bd

  • SHA256

    6346e469fd7955c581d376222e79eff370451976e50d780c2e89a2defe8fd637

  • SHA512

    3904a1bff1b9849abbe219871d9c10b9edab92c24d652b977da29e9bf0de3bdc04eff8fb497926e0d5d523e3a3bc30f54062e59726fcaf1e3ef1ffb5ec20d3cd

  • SSDEEP

    24576:wDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPV:MFhwFzPBYb02y4SA5ME

Score
7/10

Malware Config

Targets

    • Target

      6346e469fd7955c581d376222e79eff370451976e50d780c2e89a2defe8fd637

    • Size

      828KB

    • MD5

      7aa768327aeb27581ae275dd83f4a58f

    • SHA1

      30acffa01877a6e0e7f3924ae24f20c353b4e1bd

    • SHA256

      6346e469fd7955c581d376222e79eff370451976e50d780c2e89a2defe8fd637

    • SHA512

      3904a1bff1b9849abbe219871d9c10b9edab92c24d652b977da29e9bf0de3bdc04eff8fb497926e0d5d523e3a3bc30f54062e59726fcaf1e3ef1ffb5ec20d3cd

    • SSDEEP

      24576:wDFhwFzsQNLAr5bj/b4FKHrJ841gAQguqMwPV:MFhwFzPBYb02y4SA5ME

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Tasks