65de34b81580cc86f62234f7123bc64ed66bfa5376ca72b0565bc890aa24e0cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65de34b81580cc86f62234f7123bc64ed66bfa5376ca72b0565bc890aa24e0cf
Size

1.1MB
Sample

221127-d1wsrafd52
MD5

b49df0ad5dc5ee0b86080699bbf52f0f
SHA1

17308d557da82cc69f38bfaa9c5737dde8a2b295
SHA256

65de34b81580cc86f62234f7123bc64ed66bfa5376ca72b0565bc890aa24e0cf
SHA512

5371980c971cf7363c502f00111d16608b0bf3d02f3981ce6316d697043008e5f3566437e61c5a700ce17f4c6fe0541aae4d9432194f3d54986c890506036b55
SSDEEP

12288:fuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHW:f3jl2WzbZL6gEAqEVmA7x6FAnc/

Score

7^/10

Malware Config

Targets

- Target
  
  65de34b81580cc86f62234f7123bc64ed66bfa5376ca72b0565bc890aa24e0cf
- Size
  
  1.1MB
- MD5
  
  b49df0ad5dc5ee0b86080699bbf52f0f
- SHA1
  
  17308d557da82cc69f38bfaa9c5737dde8a2b295
- SHA256
  
  65de34b81580cc86f62234f7123bc64ed66bfa5376ca72b0565bc890aa24e0cf
- SHA512
  
  5371980c971cf7363c502f00111d16608b0bf3d02f3981ce6316d697043008e5f3566437e61c5a700ce17f4c6fe0541aae4d9432194f3d54986c890506036b55
- SSDEEP
  
  12288:fuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHW:f3jl2WzbZL6gEAqEVmA7x6FAnc/
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2