b8743fb2ac6641265f7d5a8183f5efe927c9804e5a9cfa0760631b9e50426785 | Triage

Sharing

General

Target

b8743fb2ac6641265f7d5a8183f5efe927c9804e5a9cfa0760631b9e50426785
Size

1.0MB
Sample

221127-drpm3seh29
MD5

b1aefdcbd4a2ec608b197d6d470c7d37
SHA1

98a2f1247f02e348c59bf47b24d0050bf2f4f1b1
SHA256

b8743fb2ac6641265f7d5a8183f5efe927c9804e5a9cfa0760631b9e50426785
SHA512

ea48a6c9837894b44e4957ee0c9d473d96474c457b8eb1c3376106b6c20084a6420523fa7c8e4ba12105caa3ea2fb4d840b9ba76e0b9778fb7207b9b099cc004
SSDEEP

24576:CO9NENGtIfz4RItOQDlfhG83DAIUnGkJp1GBz:Cg+NBOQ9c83D271G9

Score

7^/10

Malware Config

Targets

- Target
  
  b8743fb2ac6641265f7d5a8183f5efe927c9804e5a9cfa0760631b9e50426785
- Size
  
  1.0MB
- MD5
  
  b1aefdcbd4a2ec608b197d6d470c7d37
- SHA1
  
  98a2f1247f02e348c59bf47b24d0050bf2f4f1b1
- SHA256
  
  b8743fb2ac6641265f7d5a8183f5efe927c9804e5a9cfa0760631b9e50426785
- SHA512
  
  ea48a6c9837894b44e4957ee0c9d473d96474c457b8eb1c3376106b6c20084a6420523fa7c8e4ba12105caa3ea2fb4d840b9ba76e0b9778fb7207b9b099cc004
- SSDEEP
  
  24576:CO9NENGtIfz4RItOQDlfhG83DAIUnGkJp1GBz:Cg+NBOQ9c83D271G9
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2