94729ae7ea4e7eb5a2dd4439dee0bf800eaa4384af83e8d98f01da036503e18f | Triage

Sharing

General

Target

94729ae7ea4e7eb5a2dd4439dee0bf800eaa4384af83e8d98f01da036503e18f
Size

1.0MB
Sample

221127-kab4zscc46
MD5

eee3fcee5f8e6153c5868026c9299c52
SHA1

86187d85daadd3cabfe254b9d65763dcf95bdaae
SHA256

94729ae7ea4e7eb5a2dd4439dee0bf800eaa4384af83e8d98f01da036503e18f
SHA512

ccd8c72dea9cf4559915e65fa40eaa87203d8c90d8c408c304f8cb9ef3170c2e9659004647366e988048d61c0010da96e29d6fa69c6504be96ca08b02b0a0a96
SSDEEP

24576:ylafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:yaANaRGRpuHetmGimZ

Score

7^/10

Malware Config

Targets

- Target
  
  94729ae7ea4e7eb5a2dd4439dee0bf800eaa4384af83e8d98f01da036503e18f
- Size
  
  1.0MB
- MD5
  
  eee3fcee5f8e6153c5868026c9299c52
- SHA1
  
  86187d85daadd3cabfe254b9d65763dcf95bdaae
- SHA256
  
  94729ae7ea4e7eb5a2dd4439dee0bf800eaa4384af83e8d98f01da036503e18f
- SHA512
  
  ccd8c72dea9cf4559915e65fa40eaa87203d8c90d8c408c304f8cb9ef3170c2e9659004647366e988048d61c0010da96e29d6fa69c6504be96ca08b02b0a0a96
- SSDEEP
  
  24576:ylafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:yaANaRGRpuHetmGimZ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2