1e4db8b92aa23a16e7472fa33bdc48e24c78ee2cf14179e51bd868cab1c485df | Triage

Sharing

General

Target

1e4db8b92aa23a16e7472fa33bdc48e24c78ee2cf14179e51bd868cab1c485df
Size

1.1MB
Sample

221127-d8s2tsfh65
MD5

ce5c8ae3345414d67bc854d09bb83c9d
SHA1

a6043f526ac4cf960ef7f28c913c25c509eb0f99
SHA256

1e4db8b92aa23a16e7472fa33bdc48e24c78ee2cf14179e51bd868cab1c485df
SHA512

b5beaa96e569677ae21cae52be404d5bb22057562551ee249db622f969b194352f76c0c50da68e970a50bd5fc93b089cf50d3949ac499705eb44a306efd72f7b
SSDEEP

12288:PuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAH7:P3jl2WzbZL6gEAqEVmA7x6FAnce

Score

7^/10

Malware Config

Targets

- Target
  
  1e4db8b92aa23a16e7472fa33bdc48e24c78ee2cf14179e51bd868cab1c485df
- Size
  
  1.1MB
- MD5
  
  ce5c8ae3345414d67bc854d09bb83c9d
- SHA1
  
  a6043f526ac4cf960ef7f28c913c25c509eb0f99
- SHA256
  
  1e4db8b92aa23a16e7472fa33bdc48e24c78ee2cf14179e51bd868cab1c485df
- SHA512
  
  b5beaa96e569677ae21cae52be404d5bb22057562551ee249db622f969b194352f76c0c50da68e970a50bd5fc93b089cf50d3949ac499705eb44a306efd72f7b
- SSDEEP
  
  12288:PuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAH7:P3jl2WzbZL6gEAqEVmA7x6FAnce
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2