293767388707ab29d656d5dfed88f044d7bafb0777c58fbd1f89d1f89b75dcfc | Triage

Sharing

General

Target

293767388707ab29d656d5dfed88f044d7bafb0777c58fbd1f89d1f89b75dcfc
Size

1.0MB
Sample

221127-d7ta7sbd3v
MD5

679573a4fee8b645c093bea3eee6e011
SHA1

bf048f20745e2fe2ad9beb04e29017ac4a2a648f
SHA256

293767388707ab29d656d5dfed88f044d7bafb0777c58fbd1f89d1f89b75dcfc
SHA512

3445fc6af26aa116ad6ba6459c13cf38e58e9ce36c9efe2525e7cb6268091d33939349b71b76e096473b171973a51bbb0b1d05964056d6261ad342bde572059d
SSDEEP

24576:zlafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+f:RaANaRGRpuHetmGimZf

Score

7^/10

Malware Config

Targets

- Target
  
  293767388707ab29d656d5dfed88f044d7bafb0777c58fbd1f89d1f89b75dcfc
- Size
  
  1.0MB
- MD5
  
  679573a4fee8b645c093bea3eee6e011
- SHA1
  
  bf048f20745e2fe2ad9beb04e29017ac4a2a648f
- SHA256
  
  293767388707ab29d656d5dfed88f044d7bafb0777c58fbd1f89d1f89b75dcfc
- SHA512
  
  3445fc6af26aa116ad6ba6459c13cf38e58e9ce36c9efe2525e7cb6268091d33939349b71b76e096473b171973a51bbb0b1d05964056d6261ad342bde572059d
- SSDEEP
  
  24576:zlafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+f:RaANaRGRpuHetmGimZf
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2