da17dfd4aeaded248e7d4587f384eeb67a69eb1a15f0842f536a55256ae947e4 | Triage

Sharing

General

Target

da17dfd4aeaded248e7d4587f384eeb67a69eb1a15f0842f536a55256ae947e4
Size

1.0MB
Sample

221127-j7z2msfg31
MD5

22ed7e2f910b74266164947a08041c80
SHA1

3c2dc4a420e6904388010ed51eb5b8d56ad7eb4f
SHA256

da17dfd4aeaded248e7d4587f384eeb67a69eb1a15f0842f536a55256ae947e4
SHA512

c2f6e549ac7690bc51a7a379b0856a8e2633125cb6c1c546f1045e707e83bcf78999e64c8cf8d411f7b3d60c14be6078c0dae4ffed7da2d2df2a203a42c14e3c
SSDEEP

24576:eZafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:uaANaRGRpuHetmGimZ

Score

7^/10

Malware Config

Targets

- Target
  
  da17dfd4aeaded248e7d4587f384eeb67a69eb1a15f0842f536a55256ae947e4
- Size
  
  1.0MB
- MD5
  
  22ed7e2f910b74266164947a08041c80
- SHA1
  
  3c2dc4a420e6904388010ed51eb5b8d56ad7eb4f
- SHA256
  
  da17dfd4aeaded248e7d4587f384eeb67a69eb1a15f0842f536a55256ae947e4
- SHA512
  
  c2f6e549ac7690bc51a7a379b0856a8e2633125cb6c1c546f1045e707e83bcf78999e64c8cf8d411f7b3d60c14be6078c0dae4ffed7da2d2df2a203a42c14e3c
- SSDEEP
  
  24576:eZafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:uaANaRGRpuHetmGimZ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2