d7d950581299ff4888bb577728baff8b5cd1c7eda206e0c733fc2ebd7a7d79e6 | Triage

Sharing

General

Target

d7d950581299ff4888bb577728baff8b5cd1c7eda206e0c733fc2ebd7a7d79e6
Size

1.1MB
Sample

221126-t48vgsca6w
MD5

af81410aa60b1bb0a324dd64d3362291
SHA1

be1a4b70443bf579dc4772d3b2b51194c2f81cf3
SHA256

d7d950581299ff4888bb577728baff8b5cd1c7eda206e0c733fc2ebd7a7d79e6
SHA512

851d64bb0be6e73add6859f18e55d34cbd072107bdd3843cce41be79af0bea81e984d426d19a85a44e120210bb87e47dd20278bacc5cbcd94e846d732b96a20d
SSDEEP

24576:E8vLvb1yMby1E51gyoMD/9+rSOPTW8prG:EWtbKELB6rhW8hG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d7d950581299ff4888bb577728baff8b5cd1c7eda206e0c733fc2ebd7a7d79e6
- Size
  
  1.1MB
- MD5
  
  af81410aa60b1bb0a324dd64d3362291
- SHA1
  
  be1a4b70443bf579dc4772d3b2b51194c2f81cf3
- SHA256
  
  d7d950581299ff4888bb577728baff8b5cd1c7eda206e0c733fc2ebd7a7d79e6
- SHA512
  
  851d64bb0be6e73add6859f18e55d34cbd072107bdd3843cce41be79af0bea81e984d426d19a85a44e120210bb87e47dd20278bacc5cbcd94e846d732b96a20d
- SSDEEP
  
  24576:E8vLvb1yMby1E51gyoMD/9+rSOPTW8prG:EWtbKELB6rhW8hG
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2