2a03c7cefed6ba093c6a4ed11bdb5fc62ead9b21d57e8ceede19ec5367323578 | Triage

Sharing

General

Target

2a03c7cefed6ba093c6a4ed11bdb5fc62ead9b21d57e8ceede19ec5367323578
Size

1.0MB
Sample

221127-d7mtesfg82
MD5

9c00666068c271514fe097e0b8e9b5e6
SHA1

c1119c3ccbb9009386115738892bea8c0b0391cf
SHA256

2a03c7cefed6ba093c6a4ed11bdb5fc62ead9b21d57e8ceede19ec5367323578
SHA512

acf60cf799fb6182c133315c58b74dc3c24c1aebc44f234b7a221ccaed585dc3ab8664a1218cfe5196dd47f284811fc553156c6d3bf2be8f580b4af4070f609f
SSDEEP

24576:jlafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+Q:haANaRGRpuHetmGimZQ

Score

7^/10

Malware Config

Targets

- Target
  
  2a03c7cefed6ba093c6a4ed11bdb5fc62ead9b21d57e8ceede19ec5367323578
- Size
  
  1.0MB
- MD5
  
  9c00666068c271514fe097e0b8e9b5e6
- SHA1
  
  c1119c3ccbb9009386115738892bea8c0b0391cf
- SHA256
  
  2a03c7cefed6ba093c6a4ed11bdb5fc62ead9b21d57e8ceede19ec5367323578
- SHA512
  
  acf60cf799fb6182c133315c58b74dc3c24c1aebc44f234b7a221ccaed585dc3ab8664a1218cfe5196dd47f284811fc553156c6d3bf2be8f580b4af4070f609f
- SSDEEP
  
  24576:jlafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+Q:haANaRGRpuHetmGimZQ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2