fa74fe13ff8b2df8fccf2979fb9a7b0beb69600b775aec4ca5a082564bca3f9d | Triage

Sharing

General

Target

fa74fe13ff8b2df8fccf2979fb9a7b0beb69600b775aec4ca5a082564bca3f9d
Size

854KB
Sample

221127-errywahb32
MD5

89570d9bab2f416083123706ef6e18b3
SHA1

d202b8869a89204a3bd0fbad4630aae3b8085efc
SHA256

fa74fe13ff8b2df8fccf2979fb9a7b0beb69600b775aec4ca5a082564bca3f9d
SHA512

b210d5530c7c761f16a32f2f311e4058e9ea1bc23cee3596ca42c072a7872fc4f62ef35924337272f07e1b6de224f5856d8594da96bf457123b22291729381b5
SSDEEP

24576:LYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvc:kqaxyDC2JmSoPvikO8c

Score

7^/10

Malware Config

Targets

- Target
  
  fa74fe13ff8b2df8fccf2979fb9a7b0beb69600b775aec4ca5a082564bca3f9d
- Size
  
  854KB
- MD5
  
  89570d9bab2f416083123706ef6e18b3
- SHA1
  
  d202b8869a89204a3bd0fbad4630aae3b8085efc
- SHA256
  
  fa74fe13ff8b2df8fccf2979fb9a7b0beb69600b775aec4ca5a082564bca3f9d
- SHA512
  
  b210d5530c7c761f16a32f2f311e4058e9ea1bc23cee3596ca42c072a7872fc4f62ef35924337272f07e1b6de224f5856d8594da96bf457123b22291729381b5
- SSDEEP
  
  24576:LYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvc:kqaxyDC2JmSoPvikO8c
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2