c687815081d358b6dd39b675e2c5656504083b1ff01041df5ae85b1acd49236c | Triage

Sharing

General

Target

c687815081d358b6dd39b675e2c5656504083b1ff01041df5ae85b1acd49236c
Size

1.0MB
Sample

221127-dqagrsac3v
MD5

814449f0a4f778ba15ac3253fffef67b
SHA1

49c88133dc9848a3eda5eb4c37a952313c9719a2
SHA256

c687815081d358b6dd39b675e2c5656504083b1ff01041df5ae85b1acd49236c
SHA512

5859954b04f6eff937636b3eb4ff5cdd3b780a5a91c1c0bc078a78ba1e8ed8a600baeba0c9356876e60626490ebae22783c908c24217b2271448e87bddb29a97
SSDEEP

24576:CO9NENGtIfz4RItOQDlfhG83DAIUnGkJp1GBy:Cg+NBOQ9c83D271G8

Score

7^/10

Malware Config

Targets

- Target
  
  c687815081d358b6dd39b675e2c5656504083b1ff01041df5ae85b1acd49236c
- Size
  
  1.0MB
- MD5
  
  814449f0a4f778ba15ac3253fffef67b
- SHA1
  
  49c88133dc9848a3eda5eb4c37a952313c9719a2
- SHA256
  
  c687815081d358b6dd39b675e2c5656504083b1ff01041df5ae85b1acd49236c
- SHA512
  
  5859954b04f6eff937636b3eb4ff5cdd3b780a5a91c1c0bc078a78ba1e8ed8a600baeba0c9356876e60626490ebae22783c908c24217b2271448e87bddb29a97
- SSDEEP
  
  24576:CO9NENGtIfz4RItOQDlfhG83DAIUnGkJp1GBy:Cg+NBOQ9c83D271G8
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2