7b5fdcf25952658246c4212ca92fbf17348f6963982566da43e1875aaeac22bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b5fdcf25952658246c4212ca92fbf17348f6963982566da43e1875aaeac22bb
Size

1.1MB
Sample

221127-dyvsnsag7y
MD5

f151ba6c6cb2f147cdcc5784668bcf29
SHA1

8ecec4fc842a6bf1ee32a6073d5c08983195a49b
SHA256

7b5fdcf25952658246c4212ca92fbf17348f6963982566da43e1875aaeac22bb
SHA512

526ff5c0a5193e6c11aa8d2eb99a1f96a143223f24aeb2e9e5560329a5798d10e6804184ab4a0386e7ca19476a40818747e6ee833b0f4acb24dfb79c2b78965b
SSDEEP

12288:uuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHK:u3jl2WzbZL6gEAqEVmA7x6FAncL

Score

7^/10

Malware Config

Targets

- Target
  
  7b5fdcf25952658246c4212ca92fbf17348f6963982566da43e1875aaeac22bb
- Size
  
  1.1MB
- MD5
  
  f151ba6c6cb2f147cdcc5784668bcf29
- SHA1
  
  8ecec4fc842a6bf1ee32a6073d5c08983195a49b
- SHA256
  
  7b5fdcf25952658246c4212ca92fbf17348f6963982566da43e1875aaeac22bb
- SHA512
  
  526ff5c0a5193e6c11aa8d2eb99a1f96a143223f24aeb2e9e5560329a5798d10e6804184ab4a0386e7ca19476a40818747e6ee833b0f4acb24dfb79c2b78965b
- SSDEEP
  
  12288:uuklkMVqd1t8jEIoCTaPG0j4DeuH5GyAw64vYr1IZq6T7UNU7hm92J6Gz1VwFAHK:u3jl2WzbZL6gEAqEVmA7x6FAncL
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2