7f1e2070ad3230e4a4bd7dd06b62d2afe7f5384348be06d15508ffb72d021d77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f1e2070ad3230e4a4bd7dd06b62d2afe7f5384348be06d15508ffb72d021d77
Size

600KB
Sample

221127-ghg4esgh61
MD5

98a7c48aec31293776784e8c0aa714c8
SHA1

c49229c3d1a089eac46a4748e21e8b10f9c5b535
SHA256

7f1e2070ad3230e4a4bd7dd06b62d2afe7f5384348be06d15508ffb72d021d77
SHA512

95dee097ffdf7ce3b132ffc9b3a7a9d51780b5ea800b100c9e0b5e391d0adb03685ca44890042b679ea4d6943d85e3efe34080d5b1f71153e268e33caf82351b
SSDEEP

12288:Pnp7MTrnNc4cMCEASQPCnXYjCsCutCfAIh+ww3dG:vpITTNcmkS0CnIjoNhatG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  7f1e2070ad3230e4a4bd7dd06b62d2afe7f5384348be06d15508ffb72d021d77
- Size
  
  600KB
- MD5
  
  98a7c48aec31293776784e8c0aa714c8
- SHA1
  
  c49229c3d1a089eac46a4748e21e8b10f9c5b535
- SHA256
  
  7f1e2070ad3230e4a4bd7dd06b62d2afe7f5384348be06d15508ffb72d021d77
- SHA512
  
  95dee097ffdf7ce3b132ffc9b3a7a9d51780b5ea800b100c9e0b5e391d0adb03685ca44890042b679ea4d6943d85e3efe34080d5b1f71153e268e33caf82351b
- SSDEEP
  
  12288:Pnp7MTrnNc4cMCEASQPCnXYjCsCutCfAIh+ww3dG:vpITTNcmkS0CnIjoNhatG
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2