ddbdd0d265c549972692e1fc7fc5b289aff0668ebce230b1203bbc48e9488f47 | Triage

Sharing

General

Target

ddbdd0d265c549972692e1fc7fc5b289aff0668ebce230b1203bbc48e9488f47
Size

853KB
Sample

221127-e5gp3adf21
MD5

42333844b9436eb11ea02b4f405eeac4
SHA1

e418d13357cb0eb3ff2e1767e0e0e8d4fa35b374
SHA256

ddbdd0d265c549972692e1fc7fc5b289aff0668ebce230b1203bbc48e9488f47
SHA512

9e6e6b05a065a6548f6971311644035e86cdcff3c2dffa5e2ab1020999d9943981d3c20b8857ba843b6a032f4fa11ca536d2102cc36972c2d185aa863305e8b9
SSDEEP

24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvK:mqaxyDC2JmSoPvikO8K

Score

7^/10

Malware Config

Targets

- Target
  
  ddbdd0d265c549972692e1fc7fc5b289aff0668ebce230b1203bbc48e9488f47
- Size
  
  853KB
- MD5
  
  42333844b9436eb11ea02b4f405eeac4
- SHA1
  
  e418d13357cb0eb3ff2e1767e0e0e8d4fa35b374
- SHA256
  
  ddbdd0d265c549972692e1fc7fc5b289aff0668ebce230b1203bbc48e9488f47
- SHA512
  
  9e6e6b05a065a6548f6971311644035e86cdcff3c2dffa5e2ab1020999d9943981d3c20b8857ba843b6a032f4fa11ca536d2102cc36972c2d185aa863305e8b9
- SSDEEP
  
  24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvK:mqaxyDC2JmSoPvikO8K
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2