a51a79057a6946d6b0627beececbe4e38d3fffcaa15e7d89807d25a63b96fb61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a51a79057a6946d6b0627beececbe4e38d3fffcaa15e7d89807d25a63b96fb61
Size

853KB
Sample

221127-fvg4hsbf97
MD5

4fabd4240f3994b10404f42ddf01a837
SHA1

0b1ff436cdae5d6c7ccf91acc10fa6072954f688
SHA256

a51a79057a6946d6b0627beececbe4e38d3fffcaa15e7d89807d25a63b96fb61
SHA512

e335077e275feb4887042a651a2b3d0271a069e415073a96c5a6ee4f10645ef57d68a8d053efd36f94debdfab6f6630be801571c3d5429fb1d3315ecb2527ed7
SSDEEP

24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvS:mqaxyDC2JmSoPvikO8S

Score

7^/10

Malware Config

Targets

- Target
  
  a51a79057a6946d6b0627beececbe4e38d3fffcaa15e7d89807d25a63b96fb61
- Size
  
  853KB
- MD5
  
  4fabd4240f3994b10404f42ddf01a837
- SHA1
  
  0b1ff436cdae5d6c7ccf91acc10fa6072954f688
- SHA256
  
  a51a79057a6946d6b0627beececbe4e38d3fffcaa15e7d89807d25a63b96fb61
- SHA512
  
  e335077e275feb4887042a651a2b3d0271a069e415073a96c5a6ee4f10645ef57d68a8d053efd36f94debdfab6f6630be801571c3d5429fb1d3315ecb2527ed7
- SSDEEP
  
  24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvS:mqaxyDC2JmSoPvikO8S
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2