324ecf4f7e0bd62162e8ca1e9005596e1301f130069d106a844450a086f02c6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

324ecf4f7e0bd62162e8ca1e9005596e1301f130069d106a844450a086f02c6f
Size

1.0MB
Sample

221127-kdaqbsgb6z
MD5

b95fdc62536369fa2c8be53e00ada03a
SHA1

1905ddeae376c708dc27e53b39c951ee49659a6d
SHA256

324ecf4f7e0bd62162e8ca1e9005596e1301f130069d106a844450a086f02c6f
SHA512

2599dfa1956fcf092179b9bee99244799ff95c6fab87181d86ed10c972c283b98aabea2f58668e7e855ca84b41b0251d662721ece967d04e2bcbf4345b6cd879
SSDEEP

24576:ilafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+/:CaANaRGRpuHetmGimZ/

Score

7^/10

Malware Config

Targets

- Target
  
  324ecf4f7e0bd62162e8ca1e9005596e1301f130069d106a844450a086f02c6f
- Size
  
  1.0MB
- MD5
  
  b95fdc62536369fa2c8be53e00ada03a
- SHA1
  
  1905ddeae376c708dc27e53b39c951ee49659a6d
- SHA256
  
  324ecf4f7e0bd62162e8ca1e9005596e1301f130069d106a844450a086f02c6f
- SHA512
  
  2599dfa1956fcf092179b9bee99244799ff95c6fab87181d86ed10c972c283b98aabea2f58668e7e855ca84b41b0251d662721ece967d04e2bcbf4345b6cd879
- SSDEEP
  
  24576:ilafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+/:CaANaRGRpuHetmGimZ/
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2