4d19f96cecdcd9db2f2b1e64739b155c31d1626cfd0701e83f5a8ed3fd8e3e3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d19f96cecdcd9db2f2b1e64739b155c31d1626cfd0701e83f5a8ed3fd8e3e3c
Size

1.0MB
Sample

221127-d4drcafe89
MD5

5783014f73a1fe5a15db77158263ed91
SHA1

66f82fe9048ed88ef1ef06a014ce00678ae8eb7a
SHA256

4d19f96cecdcd9db2f2b1e64739b155c31d1626cfd0701e83f5a8ed3fd8e3e3c
SHA512

c7cd0923be4e5bb5d73f01bd75781685496d50301e5b2297579b7a7d66a5d5d120cfd1710c3b9eec6e5a603b210298a8b392320cf51a2a1aff9c75e951c657da
SSDEEP

24576:CO9NENGtIfz4RItOQDlfhG83DAIUnGkJp1GBP:Cg+NBOQ9c83D271Gd

Score

7^/10

Malware Config

Targets

- Target
  
  4d19f96cecdcd9db2f2b1e64739b155c31d1626cfd0701e83f5a8ed3fd8e3e3c
- Size
  
  1.0MB
- MD5
  
  5783014f73a1fe5a15db77158263ed91
- SHA1
  
  66f82fe9048ed88ef1ef06a014ce00678ae8eb7a
- SHA256
  
  4d19f96cecdcd9db2f2b1e64739b155c31d1626cfd0701e83f5a8ed3fd8e3e3c
- SHA512
  
  c7cd0923be4e5bb5d73f01bd75781685496d50301e5b2297579b7a7d66a5d5d120cfd1710c3b9eec6e5a603b210298a8b392320cf51a2a1aff9c75e951c657da
- SSDEEP
  
  24576:CO9NENGtIfz4RItOQDlfhG83DAIUnGkJp1GBP:Cg+NBOQ9c83D271Gd
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2