Overview

overview

7

Static

static

76476c6a78...56.exe

windows7-x64

7

76476c6a78...56.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76476c6a78e1636baaa8a8ff4acaddedbe98bdafe68c7243a02b3bca05269c56

  • Size

    1.2MB

  • Sample

    221126-t47mesca6v

  • MD5

    fb4874d4b6e4f2a6a0f3e4a82cd88094

  • SHA1

    63736098614ee9156017bd5ce8cd5ff2847b6a07

  • SHA256

    76476c6a78e1636baaa8a8ff4acaddedbe98bdafe68c7243a02b3bca05269c56

  • SHA512

    d559dc088e1ef0622a1edca071540aada70e426c61444ff6cb0e74a5108d0287c668e0380e0a47b0f2313c5a658646629afe4722feb34d4cb87ee9dd86fdcb63

  • SSDEEP

    24576:bCStj/R+pud1sQN6TgXxruXQNjj43/qql:9r0C/5XIANvMl

Score
7/10
discovery

Malware Config

Targets

    • Target

      76476c6a78e1636baaa8a8ff4acaddedbe98bdafe68c7243a02b3bca05269c56

    • Size

      1.2MB

    • MD5

      fb4874d4b6e4f2a6a0f3e4a82cd88094

    • SHA1

      63736098614ee9156017bd5ce8cd5ff2847b6a07

    • SHA256

      76476c6a78e1636baaa8a8ff4acaddedbe98bdafe68c7243a02b3bca05269c56

    • SHA512

      d559dc088e1ef0622a1edca071540aada70e426c61444ff6cb0e74a5108d0287c668e0380e0a47b0f2313c5a658646629afe4722feb34d4cb87ee9dd86fdcb63

    • SSDEEP

      24576:bCStj/R+pud1sQN6TgXxruXQNjj43/qql:9r0C/5XIANvMl

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks