29d2ee7d7d8114d99c66fcff133ba548ce8d5178997207602758f1678d64ea15 | Triage

Sharing

General

Target

29d2ee7d7d8114d99c66fcff133ba548ce8d5178997207602758f1678d64ea15
Size

1.1MB
Sample

221127-d7nqqafg84
MD5

bb0c170acf95399fd2eb52482e8e8bec
SHA1

8f172d1dc74d405039c441c8fb3795412a1e0bab
SHA256

29d2ee7d7d8114d99c66fcff133ba548ce8d5178997207602758f1678d64ea15
SHA512

66a15efffe7dfeabf9afcbfc10d38f8db9383b1f5a12b456c658d5bcb5148a878525df58719a947aa9d73cc8d11a2f5b7d834411266e7c53dd9c65979df2d7fe
SSDEEP

12288:PuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHD:P3jl2WzbZL6gEAqEVmA7x6FAncK

Score

7^/10

Malware Config

Targets

- Target
  
  29d2ee7d7d8114d99c66fcff133ba548ce8d5178997207602758f1678d64ea15
- Size
  
  1.1MB
- MD5
  
  bb0c170acf95399fd2eb52482e8e8bec
- SHA1
  
  8f172d1dc74d405039c441c8fb3795412a1e0bab
- SHA256
  
  29d2ee7d7d8114d99c66fcff133ba548ce8d5178997207602758f1678d64ea15
- SHA512
  
  66a15efffe7dfeabf9afcbfc10d38f8db9383b1f5a12b456c658d5bcb5148a878525df58719a947aa9d73cc8d11a2f5b7d834411266e7c53dd9c65979df2d7fe
- SSDEEP
  
  12288:PuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHD:P3jl2WzbZL6gEAqEVmA7x6FAncK
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2