b169038aae36dbf92e27f02a9cadd730ecc91d3dc7c685e73f820232474c9698 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b169038aae36dbf92e27f02a9cadd730ecc91d3dc7c685e73f820232474c9698
Size

1.0MB
Sample

221127-dsrttseh76
MD5

3cd03aecd7c256e2cf096c5e0de2c6e1
SHA1

43c6615846ab126572f01c24b170312e62db2a7a
SHA256

b169038aae36dbf92e27f02a9cadd730ecc91d3dc7c685e73f820232474c9698
SHA512

b4433fe11cd9087136243c76c2290072461cac4f33dbf7478619dde43d5249712b7f064aabce4a9e77c378c20078e3be4c80aa829eb78b06c20579b4615cbbbf
SSDEEP

24576:CZafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+C:iaANaRGRpuHetmGimZC

Score

7^/10

Malware Config

Targets

- Target
  
  b169038aae36dbf92e27f02a9cadd730ecc91d3dc7c685e73f820232474c9698
- Size
  
  1.0MB
- MD5
  
  3cd03aecd7c256e2cf096c5e0de2c6e1
- SHA1
  
  43c6615846ab126572f01c24b170312e62db2a7a
- SHA256
  
  b169038aae36dbf92e27f02a9cadd730ecc91d3dc7c685e73f820232474c9698
- SHA512
  
  b4433fe11cd9087136243c76c2290072461cac4f33dbf7478619dde43d5249712b7f064aabce4a9e77c378c20078e3be4c80aa829eb78b06c20579b4615cbbbf
- SSDEEP
  
  24576:CZafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+C:iaANaRGRpuHetmGimZC
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2