3d005e5f5c75ba5e95feeef9e8b7f9a098ed9035070ccb2266b0c1137d4f85c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d005e5f5c75ba5e95feeef9e8b7f9a098ed9035070ccb2266b0c1137d4f85c4
Size

1.1MB
Sample

221127-j2qwsabf92
MD5

017a647a2d67ab4810fa4414584424fd
SHA1

e828f87563fdfb4df79714e75f51bcc473617123
SHA256

3d005e5f5c75ba5e95feeef9e8b7f9a098ed9035070ccb2266b0c1137d4f85c4
SHA512

5f0d7c2e4e1ea43fbdd334695d27bdc8fd36349e2a8e1bd02147f304e68374a698df2010eba5dbe9c81870496c6bdb5c70d26c6cc824499203b04342f5db05fb
SSDEEP

12288:Mxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGsJ:MgS73RKUsaVdzOotdDfStfsKafIgsJ

Score

7^/10

Malware Config

Targets

- Target
  
  3d005e5f5c75ba5e95feeef9e8b7f9a098ed9035070ccb2266b0c1137d4f85c4
- Size
  
  1.1MB
- MD5
  
  017a647a2d67ab4810fa4414584424fd
- SHA1
  
  e828f87563fdfb4df79714e75f51bcc473617123
- SHA256
  
  3d005e5f5c75ba5e95feeef9e8b7f9a098ed9035070ccb2266b0c1137d4f85c4
- SHA512
  
  5f0d7c2e4e1ea43fbdd334695d27bdc8fd36349e2a8e1bd02147f304e68374a698df2010eba5dbe9c81870496c6bdb5c70d26c6cc824499203b04342f5db05fb
- SSDEEP
  
  12288:Mxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGsJ:MgS73RKUsaVdzOotdDfStfsKafIgsJ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2