63150c43b2c2e848f92c640a9d3f6fa9d521f884f37d295ac8f12e94b8aeb2b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63150c43b2c2e848f92c640a9d3f6fa9d521f884f37d295ac8f12e94b8aeb2b2
Size

1.1MB
Sample

221127-bfxs7scg8w
MD5

0ba3314303383c3159a5125d08afb165
SHA1

4ce63af3350c19e2d7f97b99389749a27c365a0a
SHA256

63150c43b2c2e848f92c640a9d3f6fa9d521f884f37d295ac8f12e94b8aeb2b2
SHA512

35808a4b926d922ab4b7cfc3b7a944efb498e3b71706e2b0cabb102c801771372d45603d4cd0da4ab27b22e30046ef1ae66a4bc5ecfda8c1318f833878f2d37a
SSDEEP

24576:z8vLvb1yMby1E51gyoMD/9+rSOPTW8prp:zWtbKELB6rhW8hp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  63150c43b2c2e848f92c640a9d3f6fa9d521f884f37d295ac8f12e94b8aeb2b2
- Size
  
  1.1MB
- MD5
  
  0ba3314303383c3159a5125d08afb165
- SHA1
  
  4ce63af3350c19e2d7f97b99389749a27c365a0a
- SHA256
  
  63150c43b2c2e848f92c640a9d3f6fa9d521f884f37d295ac8f12e94b8aeb2b2
- SHA512
  
  35808a4b926d922ab4b7cfc3b7a944efb498e3b71706e2b0cabb102c801771372d45603d4cd0da4ab27b22e30046ef1ae66a4bc5ecfda8c1318f833878f2d37a
- SSDEEP
  
  24576:z8vLvb1yMby1E51gyoMD/9+rSOPTW8prp:zWtbKELB6rhW8hp
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2