268b40c7fbce981daf3df74098dcbe1281c69e6afb5f0294624807e12c6c7400 | Triage

Sharing

General

Target

268b40c7fbce981daf3df74098dcbe1281c69e6afb5f0294624807e12c6c7400
Size

599KB
Sample

221127-hhf2ssbc7z
MD5

cff4db213652a8ddb65027699e0e1415
SHA1

b84240ea996b16a06e9cb0afe9091600cfa50895
SHA256

268b40c7fbce981daf3df74098dcbe1281c69e6afb5f0294624807e12c6c7400
SHA512

3144da082d1f5294d7bf4442a237964eaafbc7161d645377251c9b502b98bf5fb299d84316935de4edbd5c512cf3de0060585c8e028d91a6fbacee1eed8dbfeb
SSDEEP

12288:znp7MTrnNc4cMCEASQPCnXYjCsCutCfAIh+ww3d:zpITTNcmkS0CnIjoNhat

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  268b40c7fbce981daf3df74098dcbe1281c69e6afb5f0294624807e12c6c7400
- Size
  
  599KB
- MD5
  
  cff4db213652a8ddb65027699e0e1415
- SHA1
  
  b84240ea996b16a06e9cb0afe9091600cfa50895
- SHA256
  
  268b40c7fbce981daf3df74098dcbe1281c69e6afb5f0294624807e12c6c7400
- SHA512
  
  3144da082d1f5294d7bf4442a237964eaafbc7161d645377251c9b502b98bf5fb299d84316935de4edbd5c512cf3de0060585c8e028d91a6fbacee1eed8dbfeb
- SSDEEP
  
  12288:znp7MTrnNc4cMCEASQPCnXYjCsCutCfAIh+ww3d:zpITTNcmkS0CnIjoNhat
Score

7^/10

discovery
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2