2c4d322442de90f1dc14d0fd4e1a390708dd4e6b855c08e9fd9daa1c10f7b1d8 | Triage

Sharing

General

Target

2c4d322442de90f1dc14d0fd4e1a390708dd4e6b855c08e9fd9daa1c10f7b1d8
Size

1.0MB
Sample

221127-kdjcgagb7z
MD5

75e4f120c8e9bf310c5b049f0282b8c6
SHA1

d40ede48c7f7b98cca3b555dc1878d6acb57b76f
SHA256

2c4d322442de90f1dc14d0fd4e1a390708dd4e6b855c08e9fd9daa1c10f7b1d8
SHA512

2482f43ce9cf31e8be1b860781fe350055c7682ad970b7456237c27043ec253bc3fe7d5c759752f95084046ef61392bea6cf323a036a5ede61a51ad68f0a6afa
SSDEEP

24576:ylafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:yaANaRGRpuHetmGimZ

Score

7^/10

Malware Config

Targets

- Target
  
  2c4d322442de90f1dc14d0fd4e1a390708dd4e6b855c08e9fd9daa1c10f7b1d8
- Size
  
  1.0MB
- MD5
  
  75e4f120c8e9bf310c5b049f0282b8c6
- SHA1
  
  d40ede48c7f7b98cca3b555dc1878d6acb57b76f
- SHA256
  
  2c4d322442de90f1dc14d0fd4e1a390708dd4e6b855c08e9fd9daa1c10f7b1d8
- SHA512
  
  2482f43ce9cf31e8be1b860781fe350055c7682ad970b7456237c27043ec253bc3fe7d5c759752f95084046ef61392bea6cf323a036a5ede61a51ad68f0a6afa
- SSDEEP
  
  24576:ylafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:yaANaRGRpuHetmGimZ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2