005c83cf3aa7a0d8bf88cbac736c996291661430c173f583fa0938983ad306ce | Triage

Sharing

General

Target

005c83cf3aa7a0d8bf88cbac736c996291661430c173f583fa0938983ad306ce
Size

1.0MB
Sample

221127-keze3scf24
MD5

c1ba37ec896e974ea8a6144ffe648c95
SHA1

3abbd5458a64c3fa4424d6b57a738b627fca4b85
SHA256

005c83cf3aa7a0d8bf88cbac736c996291661430c173f583fa0938983ad306ce
SHA512

5b107c7e849b3bbb0c0f6366872fa0ca4b9df58945476a6d37b97062238bace14ad526dcc619ae8c3935ccbf6f07cd55c3283554b60f7edfbf12ecdd44afe5e4
SSDEEP

24576:ylafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:yaANaRGRpuHetmGimZ

Score

7^/10

Malware Config

Targets

- Target
  
  005c83cf3aa7a0d8bf88cbac736c996291661430c173f583fa0938983ad306ce
- Size
  
  1.0MB
- MD5
  
  c1ba37ec896e974ea8a6144ffe648c95
- SHA1
  
  3abbd5458a64c3fa4424d6b57a738b627fca4b85
- SHA256
  
  005c83cf3aa7a0d8bf88cbac736c996291661430c173f583fa0938983ad306ce
- SHA512
  
  5b107c7e849b3bbb0c0f6366872fa0ca4b9df58945476a6d37b97062238bace14ad526dcc619ae8c3935ccbf6f07cd55c3283554b60f7edfbf12ecdd44afe5e4
- SSDEEP
  
  24576:ylafNPaNMDJOpKROZRpulZBVOkeOLimGHCmO+:yaANaRGRpuHetmGimZ
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2