6decdde3bc402c786f3d5ff38bc5283e666de3c8309b0c23f69b73eeb20cae55 | Triage

Sharing

General

Target

6decdde3bc402c786f3d5ff38bc5283e666de3c8309b0c23f69b73eeb20cae55
Size

1.1MB
Sample

221127-q5x8lacb32
MD5

0326e7c940ceaa0659f4f77da664a340
SHA1

690321877e5ae3962a831cf39113e964c17497dc
SHA256

6decdde3bc402c786f3d5ff38bc5283e666de3c8309b0c23f69b73eeb20cae55
SHA512

b3cd7167160d0b83072358014b05b92f324a421dfe9f4d7359c7f41b1a6a58d3428d95fe3d0a47d7519c2ec1121cd62ba2a540cb5370c0269f251580097dab0d
SSDEEP

12288:URecnV4R0MA7najOoalUAZZz6DyyWfiAAMu8GCJYkEno4CUdUKGNa4zLKY6iTcou:UrEEVZuFW5hVJbEnoQ9VukiTdwaOP

Score

7^/10

Malware Config

Targets

- Target
  
  6decdde3bc402c786f3d5ff38bc5283e666de3c8309b0c23f69b73eeb20cae55
- Size
  
  1.1MB
- MD5
  
  0326e7c940ceaa0659f4f77da664a340
- SHA1
  
  690321877e5ae3962a831cf39113e964c17497dc
- SHA256
  
  6decdde3bc402c786f3d5ff38bc5283e666de3c8309b0c23f69b73eeb20cae55
- SHA512
  
  b3cd7167160d0b83072358014b05b92f324a421dfe9f4d7359c7f41b1a6a58d3428d95fe3d0a47d7519c2ec1121cd62ba2a540cb5370c0269f251580097dab0d
- SSDEEP
  
  12288:URecnV4R0MA7najOoalUAZZz6DyyWfiAAMu8GCJYkEno4CUdUKGNa4zLKY6iTcou:UrEEVZuFW5hVJbEnoQ9VukiTdwaOP
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2