99a84881979990f6375e75b26a03d39b6abbb1da3d811d1dec64c7488b2fed2a | Triage

Sharing

General

Target

99a84881979990f6375e75b26a03d39b6abbb1da3d811d1dec64c7488b2fed2a
Size

1.1MB
Sample

221127-a63ayacb3t
MD5

0d0538e6dc8961f2c1cdaead7d33ed6c
SHA1

1289e61cce0de00bc96c38ed4c767358130762c8
SHA256

99a84881979990f6375e75b26a03d39b6abbb1da3d811d1dec64c7488b2fed2a
SHA512

8274dc41ae793cd6e5668dec4c89841b8382249949e221aa3a14a65a3b7a0562bb1fbdf1dd497e04471885ef4c417f858ced8be76d4e4cd9389eb5e4400a9033
SSDEEP

24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:jWtbKELB6rhW8h

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  99a84881979990f6375e75b26a03d39b6abbb1da3d811d1dec64c7488b2fed2a
- Size
  
  1.1MB
- MD5
  
  0d0538e6dc8961f2c1cdaead7d33ed6c
- SHA1
  
  1289e61cce0de00bc96c38ed4c767358130762c8
- SHA256
  
  99a84881979990f6375e75b26a03d39b6abbb1da3d811d1dec64c7488b2fed2a
- SHA512
  
  8274dc41ae793cd6e5668dec4c89841b8382249949e221aa3a14a65a3b7a0562bb1fbdf1dd497e04471885ef4c417f858ced8be76d4e4cd9389eb5e4400a9033
- SSDEEP
  
  24576:j8vLvb1yMby1E51gyoMD/9+rSOPTW8pr:jWtbKELB6rhW8h
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2