746908f6c7e69371d775e02c3b74d56950b885e358909d28a06cf41f767f248b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

746908f6c7e69371d775e02c3b74d56950b885e358909d28a06cf41f767f248b
Size

1.1MB
Sample

221127-jzxxbafb9z
MD5

20b0aed983a4ca91d9c7265b15ce81a3
SHA1

879915ba77f0f64f60b8c5bdb6dcf5817b246a65
SHA256

746908f6c7e69371d775e02c3b74d56950b885e358909d28a06cf41f767f248b
SHA512

514b80aa4d8c01dc7ed40a4893b9f8b060b73b0fbe37d25746bb214669faca2c15b9ce5283f8f0fda97a32524d8eee968a41cdfaf4ca6e99afb5050332045c0d
SSDEEP

12288:Rxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGs:RgS73RKUsaVdzOotdDfStfsKafIgs

Score

7^/10

Malware Config

Targets

- Target
  
  746908f6c7e69371d775e02c3b74d56950b885e358909d28a06cf41f767f248b
- Size
  
  1.1MB
- MD5
  
  20b0aed983a4ca91d9c7265b15ce81a3
- SHA1
  
  879915ba77f0f64f60b8c5bdb6dcf5817b246a65
- SHA256
  
  746908f6c7e69371d775e02c3b74d56950b885e358909d28a06cf41f767f248b
- SHA512
  
  514b80aa4d8c01dc7ed40a4893b9f8b060b73b0fbe37d25746bb214669faca2c15b9ce5283f8f0fda97a32524d8eee968a41cdfaf4ca6e99afb5050332045c0d
- SSDEEP
  
  12288:Rxm03dDATu3TtKUhG3QQkrEcdvMqH1dznOotRldDfHbg5+MH/QTK7ufrncquNGs:RgS73RKUsaVdzOotdDfStfsKafIgs
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2