22ff51dd53599b5085c7c989059a6cddb238e32ef1726999f4aa9f8a1e90f4bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22ff51dd53599b5085c7c989059a6cddb238e32ef1726999f4aa9f8a1e90f4bf
Size

1.1MB
Sample

221127-j3kfdsbg52
MD5

038f4fd1e3c7311428e8458041683a11
SHA1

6975840c1a4f552cc513fd9e2cb47a794a85a9a5
SHA256

22ff51dd53599b5085c7c989059a6cddb238e32ef1726999f4aa9f8a1e90f4bf
SHA512

4ba7f3bf00ec67049bca5d00109032fccc29e030b301f39cf6af425e4a153c03176990672b5d545c4f7e218adf423dec6ac2a02c4b9180bee99de3d8bc2020e2
SSDEEP

12288:xxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGs:xgS73RKUsaVdzOotdDfStfsKafIgs

Score

7^/10

Malware Config

Targets

- Target
  
  22ff51dd53599b5085c7c989059a6cddb238e32ef1726999f4aa9f8a1e90f4bf
- Size
  
  1.1MB
- MD5
  
  038f4fd1e3c7311428e8458041683a11
- SHA1
  
  6975840c1a4f552cc513fd9e2cb47a794a85a9a5
- SHA256
  
  22ff51dd53599b5085c7c989059a6cddb238e32ef1726999f4aa9f8a1e90f4bf
- SHA512
  
  4ba7f3bf00ec67049bca5d00109032fccc29e030b301f39cf6af425e4a153c03176990672b5d545c4f7e218adf423dec6ac2a02c4b9180bee99de3d8bc2020e2
- SSDEEP
  
  12288:xxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGs:xgS73RKUsaVdzOotdDfStfsKafIgs
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2