b1bf1b839233d6bc833970d9e5ecc1df9f505a6b5e2aaee756e767339a2c4fe4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1bf1b839233d6bc833970d9e5ecc1df9f505a6b5e2aaee756e767339a2c4fe4
Size

853KB
Sample

221127-fpsytsbd49
MD5

2250c281148fd38deb3f830c2718a487
SHA1

0ad177da0e51b0228439b27f6c2db87b6a968749
SHA256

b1bf1b839233d6bc833970d9e5ecc1df9f505a6b5e2aaee756e767339a2c4fe4
SHA512

bc25a47738b295f691a43346ee688fdfe5bd5e2188725ae85be137c4a46133ca78adaeda090a123e70fa0cc58a9fbb1aa0dac78b050a5272a458cd3a2f4cb6c5
SSDEEP

24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvk:mqaxyDC2JmSoPvikO8k

Score

7^/10

Malware Config

Targets

- Target
  
  b1bf1b839233d6bc833970d9e5ecc1df9f505a6b5e2aaee756e767339a2c4fe4
- Size
  
  853KB
- MD5
  
  2250c281148fd38deb3f830c2718a487
- SHA1
  
  0ad177da0e51b0228439b27f6c2db87b6a968749
- SHA256
  
  b1bf1b839233d6bc833970d9e5ecc1df9f505a6b5e2aaee756e767339a2c4fe4
- SHA512
  
  bc25a47738b295f691a43346ee688fdfe5bd5e2188725ae85be137c4a46133ca78adaeda090a123e70fa0cc58a9fbb1aa0dac78b050a5272a458cd3a2f4cb6c5
- SSDEEP
  
  24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvk:mqaxyDC2JmSoPvikO8k
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2