6ffdd357307cf81da46d5c6d275c07189324e3247d79c913db65d9e1500095ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ffdd357307cf81da46d5c6d275c07189324e3247d79c913db65d9e1500095ab
Size

1.1MB
Sample

221127-q5efgsfg2t
MD5

52416f8a8274f30ea005dee4c85210dd
SHA1

56809dee8908ba38a2f0ea4cf4892c2d02a6e128
SHA256

6ffdd357307cf81da46d5c6d275c07189324e3247d79c913db65d9e1500095ab
SHA512

9429b84476b10904c7ecbb274d6caaec4fb566dcf37d39fb179d24d6d2f9e14f35f13961645a123a8ffcd2efec25d19561307cb4b96eb2519a28cfe118d24248
SSDEEP

24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW+:48fRbE2VolvZW+

Score

7^/10

Malware Config

Targets

- Target
  
  6ffdd357307cf81da46d5c6d275c07189324e3247d79c913db65d9e1500095ab
- Size
  
  1.1MB
- MD5
  
  52416f8a8274f30ea005dee4c85210dd
- SHA1
  
  56809dee8908ba38a2f0ea4cf4892c2d02a6e128
- SHA256
  
  6ffdd357307cf81da46d5c6d275c07189324e3247d79c913db65d9e1500095ab
- SHA512
  
  9429b84476b10904c7ecbb274d6caaec4fb566dcf37d39fb179d24d6d2f9e14f35f13961645a123a8ffcd2efec25d19561307cb4b96eb2519a28cfe118d24248
- SSDEEP
  
  24576:488FqvRKoPw8NEx4VmPmsDx7Gk+Reb0wW+:48fRbE2VolvZW+
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2