a5f7f51ad2eae0bb73362d805a632916776795ba03bc58db97e0f621285cbb82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5f7f51ad2eae0bb73362d805a632916776795ba03bc58db97e0f621285cbb82
Size

1.0MB
Sample

221127-j9m5vscb95
MD5

024df906b1dd4753284521f1235162f0
SHA1

d7a18c299c69ec43e33516f3a777255a9dc0a454
SHA256

a5f7f51ad2eae0bb73362d805a632916776795ba03bc58db97e0f621285cbb82
SHA512

2b9628e870f2823b6057df1e9fda40f053d23bbfb2ccca534921bbd90479f77c4d752f5801d66fe004500facab13bd0967629196c8d1c52db052309955fe4a41
SSDEEP

24576:ylafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:yaANaRGRpuHetmGimZ

Score

7^/10

Malware Config

Targets

- Target
  
  a5f7f51ad2eae0bb73362d805a632916776795ba03bc58db97e0f621285cbb82
- Size
  
  1.0MB
- MD5
  
  024df906b1dd4753284521f1235162f0
- SHA1
  
  d7a18c299c69ec43e33516f3a777255a9dc0a454
- SHA256
  
  a5f7f51ad2eae0bb73362d805a632916776795ba03bc58db97e0f621285cbb82
- SHA512
  
  2b9628e870f2823b6057df1e9fda40f053d23bbfb2ccca534921bbd90479f77c4d752f5801d66fe004500facab13bd0967629196c8d1c52db052309955fe4a41
- SSDEEP
  
  24576:ylafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:yaANaRGRpuHetmGimZ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2