9a73af1bc5f033af7bc53de0dfc5dd4a69213ee02e8b7c29807d29eed474cc00 | Triage

Sharing

General

Target

9a73af1bc5f033af7bc53de0dfc5dd4a69213ee02e8b7c29807d29eed474cc00
Size

1.1MB
Sample

221126-t4zltaca5w
MD5

a0c3b4b7e197be7ff98518c296a4b913
SHA1

cc13a1823e2f28f17095190359ff72f55ccb1695
SHA256

9a73af1bc5f033af7bc53de0dfc5dd4a69213ee02e8b7c29807d29eed474cc00
SHA512

2583754cfa3319a6760776b27e0c22bd799bc33d886b8a424756e5ee133c6da668b33500ee67e3a42343b641cf3b124305603ef655186b1e3422beb4f95065af
SSDEEP

24576:T8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:TWtbKELB6rhW8h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9a73af1bc5f033af7bc53de0dfc5dd4a69213ee02e8b7c29807d29eed474cc00
- Size
  
  1.1MB
- MD5
  
  a0c3b4b7e197be7ff98518c296a4b913
- SHA1
  
  cc13a1823e2f28f17095190359ff72f55ccb1695
- SHA256
  
  9a73af1bc5f033af7bc53de0dfc5dd4a69213ee02e8b7c29807d29eed474cc00
- SHA512
  
  2583754cfa3319a6760776b27e0c22bd799bc33d886b8a424756e5ee133c6da668b33500ee67e3a42343b641cf3b124305603ef655186b1e3422beb4f95065af
- SSDEEP
  
  24576:T8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:TWtbKELB6rhW8h
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2