e11337c42792606196eda4a6f9c9cd22cc9ba59feff9acf74022fb46fbdbf5b1 | Triage

Sharing

General

Target

e11337c42792606196eda4a6f9c9cd22cc9ba59feff9acf74022fb46fbdbf5b1
Size

5.5MB
Sample

221127-hh83ksfg39
MD5

bbbcfa4e934122ba0a96a9dff367cf5b
SHA1

3346a1ed1fdb4c33bc1956338f79f08f6dd34f26
SHA256

e11337c42792606196eda4a6f9c9cd22cc9ba59feff9acf74022fb46fbdbf5b1
SHA512

76d337708b20086888e5f3037d29f8a37bfd98f9eff125f6f2dd4bb5ae823c1ac76cebe54383bbb8ce038d27bf7f86bf96c6f585e21bf7c1c80e9b7317e63337
SSDEEP

98304:WGdZusmwYqdwkLcHHj5SbWf+YFCNK1oLZliOuz5+If9kuPJGGf6iOdDEvJ:v5jAjQaf+HNKcqkwG46Jw

Score

7^/10

Malware Config

Targets

- Target
  
  e11337c42792606196eda4a6f9c9cd22cc9ba59feff9acf74022fb46fbdbf5b1
- Size
  
  5.5MB
- MD5
  
  bbbcfa4e934122ba0a96a9dff367cf5b
- SHA1
  
  3346a1ed1fdb4c33bc1956338f79f08f6dd34f26
- SHA256
  
  e11337c42792606196eda4a6f9c9cd22cc9ba59feff9acf74022fb46fbdbf5b1
- SHA512
  
  76d337708b20086888e5f3037d29f8a37bfd98f9eff125f6f2dd4bb5ae823c1ac76cebe54383bbb8ce038d27bf7f86bf96c6f585e21bf7c1c80e9b7317e63337
- SSDEEP
  
  98304:WGdZusmwYqdwkLcHHj5SbWf+YFCNK1oLZliOuz5+If9kuPJGGf6iOdDEvJ:v5jAjQaf+HNKcqkwG46Jw
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2