2c66554e4a5f6698cdd6b2154479b3b7873c3bea6f00e1fa24bc71a72f04cb87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c66554e4a5f6698cdd6b2154479b3b7873c3bea6f00e1fa24bc71a72f04cb87
Size

853KB
Sample

221127-hfd5esbb6v
MD5

117e35a892aee3d5f11d6a2a5a8c7874
SHA1

26d32e19468bc14754609847bb9c668281402c7f
SHA256

2c66554e4a5f6698cdd6b2154479b3b7873c3bea6f00e1fa24bc71a72f04cb87
SHA512

ba474b67f457baae18a256fb2e5d9711c6f6fc1cfcb25b9d2cdb35981806a935b2e99c1f3741ce0bec47c4e18d7838761cf16962232caa94438e3f8b15da5d6b
SSDEEP

24576:VYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv+:GqaxyDC2JmSoPvikO8+

Score

7^/10

Malware Config

Targets

- Target
  
  2c66554e4a5f6698cdd6b2154479b3b7873c3bea6f00e1fa24bc71a72f04cb87
- Size
  
  853KB
- MD5
  
  117e35a892aee3d5f11d6a2a5a8c7874
- SHA1
  
  26d32e19468bc14754609847bb9c668281402c7f
- SHA256
  
  2c66554e4a5f6698cdd6b2154479b3b7873c3bea6f00e1fa24bc71a72f04cb87
- SHA512
  
  ba474b67f457baae18a256fb2e5d9711c6f6fc1cfcb25b9d2cdb35981806a935b2e99c1f3741ce0bec47c4e18d7838761cf16962232caa94438e3f8b15da5d6b
- SSDEEP
  
  24576:VYq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfv+:GqaxyDC2JmSoPvikO8+
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2