a22cf46a2d8e50ce0b0ea2348f562de430de426b1d25865244c0566cd53d4685 | Triage

Sharing

General

Target

a22cf46a2d8e50ce0b0ea2348f562de430de426b1d25865244c0566cd53d4685
Size

987KB
Sample

221127-228eyaba2z
MD5

c1ef72a3046c94c2384f64434db1d1cd
SHA1

7cf59c1ab89bcd478b4ddae1d7874a56d7dcb045
SHA256

a22cf46a2d8e50ce0b0ea2348f562de430de426b1d25865244c0566cd53d4685
SHA512

15f0fb59b62b94b52e2019d061b65a3dc02583d6d7e06e5e969bb508f6aacca90648734cb295fe05b87c44044697772cc387550d3d3f90b6223e3c82b043b5ba
SSDEEP

24576:jLMoaD1TpxI7HKczk5998wdvwbVmwybcWKsLUy:U1TpOa599tvuToKwUy

Score

7^/10

Malware Config

Targets

- Target
  
  a22cf46a2d8e50ce0b0ea2348f562de430de426b1d25865244c0566cd53d4685
- Size
  
  987KB
- MD5
  
  c1ef72a3046c94c2384f64434db1d1cd
- SHA1
  
  7cf59c1ab89bcd478b4ddae1d7874a56d7dcb045
- SHA256
  
  a22cf46a2d8e50ce0b0ea2348f562de430de426b1d25865244c0566cd53d4685
- SHA512
  
  15f0fb59b62b94b52e2019d061b65a3dc02583d6d7e06e5e969bb508f6aacca90648734cb295fe05b87c44044697772cc387550d3d3f90b6223e3c82b043b5ba
- SSDEEP
  
  24576:jLMoaD1TpxI7HKczk5998wdvwbVmwybcWKsLUy:U1TpOa599tvuToKwUy
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2