10493bae794a8b1768df68cd43043b36413a471aca616d513ea75a6425cbcd7b | Triage

Sharing

General

Target

10493bae794a8b1768df68cd43043b36413a471aca616d513ea75a6425cbcd7b
Size

1.1MB
Sample

221127-j6jy2aff4v
MD5

838bc19c3dc4f7846bc559ebf790c91b
SHA1

4563133afeaea9d7bc5122e32f2d9d23731f3693
SHA256

10493bae794a8b1768df68cd43043b36413a471aca616d513ea75a6425cbcd7b
SHA512

48947aa254a65a8530ec3e48950b83a598311ea4c4281f2587604b67414dc385a1e812909a32611dcac9ba7278e8f7c507adad33abe1ecb393a9ee383e717d86
SSDEEP

24576:0sRXlDBAsLYAbFDz/levsYYEirnDNR37dzBsZcifA3ggsngqb9Irv8:0sR1FAeLDztOarnhOZcikgrngqbew

Score

7^/10

Malware Config

Targets

- Target
  
  10493bae794a8b1768df68cd43043b36413a471aca616d513ea75a6425cbcd7b
- Size
  
  1.1MB
- MD5
  
  838bc19c3dc4f7846bc559ebf790c91b
- SHA1
  
  4563133afeaea9d7bc5122e32f2d9d23731f3693
- SHA256
  
  10493bae794a8b1768df68cd43043b36413a471aca616d513ea75a6425cbcd7b
- SHA512
  
  48947aa254a65a8530ec3e48950b83a598311ea4c4281f2587604b67414dc385a1e812909a32611dcac9ba7278e8f7c507adad33abe1ecb393a9ee383e717d86
- SSDEEP
  
  24576:0sRXlDBAsLYAbFDz/levsYYEirnDNR37dzBsZcifA3ggsngqb9Irv8:0sR1FAeLDztOarnhOZcikgrngqbew
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2