dad26e2b9cd881056a4ed0853f4d1f893254e6caabf50a1045fed4094a3494c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dad26e2b9cd881056a4ed0853f4d1f893254e6caabf50a1045fed4094a3494c5
Size

1.1MB
Sample

221127-dmyeesaa7x
MD5

ec7fe92b5a8f550e24b4fc4bfb9a1de5
SHA1

33d5d0f3e918e1bded3edcada2430c9be7d04c4b
SHA256

dad26e2b9cd881056a4ed0853f4d1f893254e6caabf50a1045fed4094a3494c5
SHA512

42f46e97307edeb8a380a82381ac5861123e5763517619715137665f6210688153fa5e10d76111a2244996f66544219dd0d9c9de58d0dae242a0fcee06528669
SSDEEP

12288:uuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:u3jl2WzbZL6gEAqEVmA7x6FAnc

Score

7^/10

Malware Config

Targets

- Target
  
  dad26e2b9cd881056a4ed0853f4d1f893254e6caabf50a1045fed4094a3494c5
- Size
  
  1.1MB
- MD5
  
  ec7fe92b5a8f550e24b4fc4bfb9a1de5
- SHA1
  
  33d5d0f3e918e1bded3edcada2430c9be7d04c4b
- SHA256
  
  dad26e2b9cd881056a4ed0853f4d1f893254e6caabf50a1045fed4094a3494c5
- SHA512
  
  42f46e97307edeb8a380a82381ac5861123e5763517619715137665f6210688153fa5e10d76111a2244996f66544219dd0d9c9de58d0dae242a0fcee06528669
- SSDEEP
  
  12288:uuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHe:u3jl2WzbZL6gEAqEVmA7x6FAnc
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2