43daaaef7252de96766c35eaf0f45333b9dfdcd5821fee6180f20357d4584c5b | Triage

Sharing

General

Target

43daaaef7252de96766c35eaf0f45333b9dfdcd5821fee6180f20357d4584c5b
Size

853KB
Sample

221127-g624haae81
MD5

e95ff0814cd8314fad4267a16438a5eb
SHA1

181fa7b6c780ea6676f50158d6c26c6461aace8e
SHA256

43daaaef7252de96766c35eaf0f45333b9dfdcd5821fee6180f20357d4584c5b
SHA512

dae7f0985b75430a417c82ac814098285e9ea8620bdff83502551689d13bf6d5358030338405318e87a6acc1fc851e3e29f6ad748a271f1ff98f868dcff8a5d3
SSDEEP

24576:lYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvM:2qaxyDC2JmSoPvikO8M

Score

7^/10

Malware Config

Targets

- Target
  
  43daaaef7252de96766c35eaf0f45333b9dfdcd5821fee6180f20357d4584c5b
- Size
  
  853KB
- MD5
  
  e95ff0814cd8314fad4267a16438a5eb
- SHA1
  
  181fa7b6c780ea6676f50158d6c26c6461aace8e
- SHA256
  
  43daaaef7252de96766c35eaf0f45333b9dfdcd5821fee6180f20357d4584c5b
- SHA512
  
  dae7f0985b75430a417c82ac814098285e9ea8620bdff83502551689d13bf6d5358030338405318e87a6acc1fc851e3e29f6ad748a271f1ff98f868dcff8a5d3
- SSDEEP
  
  24576:lYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvM:2qaxyDC2JmSoPvikO8M
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2