b0de3f88475e584ba11d7d7bbc68d86d1057f265da612f9e8a4205d4f09ba005 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0de3f88475e584ba11d7d7bbc68d86d1057f265da612f9e8a4205d4f09ba005
Size

1.1MB
Sample

221127-jxr82sfa6z
MD5

1ab1147f135b80fcc5fa19816fcb96d5
SHA1

cd412f4b60d6772d892299daf74c17146003d9aa
SHA256

b0de3f88475e584ba11d7d7bbc68d86d1057f265da612f9e8a4205d4f09ba005
SHA512

ade7c3fe19a8064e14e1ac56f690085e8995001f746c44726597c8c1b08ab64a368bcb321a0d93a984053ae433b10c79fdf5cd2abadc489736cd0eba4060dd34
SSDEEP

12288:Bxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGso:BgS73RKUsaVdzOotdDfStfsKafIgso

Score

7^/10

Malware Config

Targets

- Target
  
  b0de3f88475e584ba11d7d7bbc68d86d1057f265da612f9e8a4205d4f09ba005
- Size
  
  1.1MB
- MD5
  
  1ab1147f135b80fcc5fa19816fcb96d5
- SHA1
  
  cd412f4b60d6772d892299daf74c17146003d9aa
- SHA256
  
  b0de3f88475e584ba11d7d7bbc68d86d1057f265da612f9e8a4205d4f09ba005
- SHA512
  
  ade7c3fe19a8064e14e1ac56f690085e8995001f746c44726597c8c1b08ab64a368bcb321a0d93a984053ae433b10c79fdf5cd2abadc489736cd0eba4060dd34
- SSDEEP
  
  12288:Bxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGso:BgS73RKUsaVdzOotdDfStfsKafIgso
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2