1265386f14c1297541280276de3d0d91a64745603a773e17f1b6bc7d375c958f | Triage

Sharing

General

Target

1265386f14c1297541280276de3d0d91a64745603a773e17f1b6bc7d375c958f
Size

1.0MB
Sample

221127-kedtdace76
MD5

834ed3e464e7dd3821228b37fdd38fc9
SHA1

76f52b8eb04039e9549e56d48f38790b9dc24cfd
SHA256

1265386f14c1297541280276de3d0d91a64745603a773e17f1b6bc7d375c958f
SHA512

02374249775633ec2cd59e2d6958f768fced0de0b956d63ea806aadf68b4391d9e556fe56be6eb253f2d2ee8c3041c27cc1d4da96782d1ac6a42d5cc35ba6fd6
SSDEEP

24576:3ZafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:JaANaRGRpuHetmGimZ

Score

7^/10

Malware Config

Targets

- Target
  
  1265386f14c1297541280276de3d0d91a64745603a773e17f1b6bc7d375c958f
- Size
  
  1.0MB
- MD5
  
  834ed3e464e7dd3821228b37fdd38fc9
- SHA1
  
  76f52b8eb04039e9549e56d48f38790b9dc24cfd
- SHA256
  
  1265386f14c1297541280276de3d0d91a64745603a773e17f1b6bc7d375c958f
- SHA512
  
  02374249775633ec2cd59e2d6958f768fced0de0b956d63ea806aadf68b4391d9e556fe56be6eb253f2d2ee8c3041c27cc1d4da96782d1ac6a42d5cc35ba6fd6
- SSDEEP
  
  24576:3ZafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:JaANaRGRpuHetmGimZ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2