d6d3fe3010a46a03c1eaa954f30c9c766c0b74c531bc273b8e1707819c8b3726 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6d3fe3010a46a03c1eaa954f30c9c766c0b74c531bc273b8e1707819c8b3726
Size

1.1MB
Sample

221127-dm938aaa8y
MD5

e4279064875d5cc0bfeb4d03a6f07260
SHA1

f2bb29b7eb53ae9c01f8cc3871a152ce2e82957a
SHA256

d6d3fe3010a46a03c1eaa954f30c9c766c0b74c531bc273b8e1707819c8b3726
SHA512

f0dd4012ee9ae3708c9b18e53deb3102f6ef5da6fff3a28d2a7d842fa20c40049cb38def9ed0556269a9e6bd6b30ae96466fba8653e31923d018baf16296df20
SSDEEP

12288:euklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAH6:e3jl2WzbZL6gEAqEVmA7x6FAncr

Score

7^/10

Malware Config

Targets

- Target
  
  d6d3fe3010a46a03c1eaa954f30c9c766c0b74c531bc273b8e1707819c8b3726
- Size
  
  1.1MB
- MD5
  
  e4279064875d5cc0bfeb4d03a6f07260
- SHA1
  
  f2bb29b7eb53ae9c01f8cc3871a152ce2e82957a
- SHA256
  
  d6d3fe3010a46a03c1eaa954f30c9c766c0b74c531bc273b8e1707819c8b3726
- SHA512
  
  f0dd4012ee9ae3708c9b18e53deb3102f6ef5da6fff3a28d2a7d842fa20c40049cb38def9ed0556269a9e6bd6b30ae96466fba8653e31923d018baf16296df20
- SSDEEP
  
  12288:euklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAH6:e3jl2WzbZL6gEAqEVmA7x6FAncr
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2