359ab8a1f365aa34c007bba020159eb1c8c13847f02c4e6be3ba42713b5752a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

359ab8a1f365aa34c007bba020159eb1c8c13847f02c4e6be3ba42713b5752a1
Size

853KB
Sample

221127-ha83lsah3x
MD5

de304540a831765977640f3dbec9ae91
SHA1

7d705be314baa4e2fc02f5ba837f84f538a81785
SHA256

359ab8a1f365aa34c007bba020159eb1c8c13847f02c4e6be3ba42713b5752a1
SHA512

b0fc987f7b1dabcc07ca947d004d650848e6d20f9e34c65db60d4c584b9f58d746f67cb0cccabce842eca708ca8f7981ad6f7456e1eef103e99d41045e42d285
SSDEEP

24576:VYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvJ:GqaxyDC2JmSoPvikO8J

Score

7^/10

Malware Config

Targets

- Target
  
  359ab8a1f365aa34c007bba020159eb1c8c13847f02c4e6be3ba42713b5752a1
- Size
  
  853KB
- MD5
  
  de304540a831765977640f3dbec9ae91
- SHA1
  
  7d705be314baa4e2fc02f5ba837f84f538a81785
- SHA256
  
  359ab8a1f365aa34c007bba020159eb1c8c13847f02c4e6be3ba42713b5752a1
- SHA512
  
  b0fc987f7b1dabcc07ca947d004d650848e6d20f9e34c65db60d4c584b9f58d746f67cb0cccabce842eca708ca8f7981ad6f7456e1eef103e99d41045e42d285
- SSDEEP
  
  24576:VYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvJ:GqaxyDC2JmSoPvikO8J
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2