bb3dc8abee166bb2a6252aa1090f1748a6bcd368b883cd2f00d01894f483ca24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb3dc8abee166bb2a6252aa1090f1748a6bcd368b883cd2f00d01894f483ca24
Size

1.0MB
Sample

221127-j82xmacb69
MD5

ef155cf860c209d2835f1a740ec3d30e
SHA1

997f884ff7bd3068706516913beab8847357fd4a
SHA256

bb3dc8abee166bb2a6252aa1090f1748a6bcd368b883cd2f00d01894f483ca24
SHA512

60c47c7c8bb5d265f3a69c28d99f67ac6fd456ef7fcd4cd88712ee02b3fddc013a312f38d019042ca2398f58b67ef3f60f366cec9facefe823e62ddb66203b0c
SSDEEP

24576:nZafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:ZaANaRGRpuHetmGimZ

Score

7^/10

Malware Config

Targets

- Target
  
  bb3dc8abee166bb2a6252aa1090f1748a6bcd368b883cd2f00d01894f483ca24
- Size
  
  1.0MB
- MD5
  
  ef155cf860c209d2835f1a740ec3d30e
- SHA1
  
  997f884ff7bd3068706516913beab8847357fd4a
- SHA256
  
  bb3dc8abee166bb2a6252aa1090f1748a6bcd368b883cd2f00d01894f483ca24
- SHA512
  
  60c47c7c8bb5d265f3a69c28d99f67ac6fd456ef7fcd4cd88712ee02b3fddc013a312f38d019042ca2398f58b67ef3f60f366cec9facefe823e62ddb66203b0c
- SSDEEP
  
  24576:nZafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:ZaANaRGRpuHetmGimZ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2