a63a74ae6e3bf68c1cb9794352ab18b6b8d4ed1853a484591bede2c1b864f584 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a63a74ae6e3bf68c1cb9794352ab18b6b8d4ed1853a484591bede2c1b864f584
Size

1.1MB
Sample

221127-eb24xabf5z
MD5

e5f5814b83f66883176d2f7c95256046
SHA1

cf4feb6e888a02e87b7f324c1218d707a4318e92
SHA256

a63a74ae6e3bf68c1cb9794352ab18b6b8d4ed1853a484591bede2c1b864f584
SHA512

c635e409920a6a291b9892afa2b921eaf0d652e0bf0b729eb80f8c0797ba9919940999c39fd6689649855312d41f0b18acca7c130d5c1adb2795e4eccc1bdc6b
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW

Score

7^/10

Malware Config

Targets

- Target
  
  a63a74ae6e3bf68c1cb9794352ab18b6b8d4ed1853a484591bede2c1b864f584
- Size
  
  1.1MB
- MD5
  
  e5f5814b83f66883176d2f7c95256046
- SHA1
  
  cf4feb6e888a02e87b7f324c1218d707a4318e92
- SHA256
  
  a63a74ae6e3bf68c1cb9794352ab18b6b8d4ed1853a484591bede2c1b864f584
- SHA512
  
  c635e409920a6a291b9892afa2b921eaf0d652e0bf0b729eb80f8c0797ba9919940999c39fd6689649855312d41f0b18acca7c130d5c1adb2795e4eccc1bdc6b
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW:48fRbE2VolvZW
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2