7c444eca92ca178f86a9f192b20a1324bb41641b36201942f5d8bb6bfbd7482f | Triage

Sharing

General

Target

7c444eca92ca178f86a9f192b20a1324bb41641b36201942f5d8bb6bfbd7482f
Size

1.1MB
Sample

221127-16282sge3s
MD5

a21a8b31d2bbdbc83e5ce35f1f3b74d1
SHA1

0588982238890906bddf398a0207744050e51e2f
SHA256

7c444eca92ca178f86a9f192b20a1324bb41641b36201942f5d8bb6bfbd7482f
SHA512

318408053bfaee83f792855a97aa6ca30dd33621afe9cff0d01735c61d7c3124f495a5b2fadea81f317bd365339000df7a99ebdd29c71a326e16379afe2c285d
SSDEEP

12288:+uklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:+3jl2WzbZL6gEAqEVmA7x6FAnc

Score

7^/10

Malware Config

Targets

- Target
  
  7c444eca92ca178f86a9f192b20a1324bb41641b36201942f5d8bb6bfbd7482f
- Size
  
  1.1MB
- MD5
  
  a21a8b31d2bbdbc83e5ce35f1f3b74d1
- SHA1
  
  0588982238890906bddf398a0207744050e51e2f
- SHA256
  
  7c444eca92ca178f86a9f192b20a1324bb41641b36201942f5d8bb6bfbd7482f
- SHA512
  
  318408053bfaee83f792855a97aa6ca30dd33621afe9cff0d01735c61d7c3124f495a5b2fadea81f317bd365339000df7a99ebdd29c71a326e16379afe2c285d
- SSDEEP
  
  12288:+uklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:+3jl2WzbZL6gEAqEVmA7x6FAnc
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2