6b41e016cfd466fe6e77f7513115f0079ce56fc4e2fd1e5c41cda6a089a1922d | Triage

Sharing

General

Target

6b41e016cfd466fe6e77f7513115f0079ce56fc4e2fd1e5c41cda6a089a1922d
Size

1.1MB
Sample

221127-q6f1pscb56
MD5

f1743f768dafa698af93ad9fa3b581d9
SHA1

f86e3904029ed1169022f469c42c26978267c8d8
SHA256

6b41e016cfd466fe6e77f7513115f0079ce56fc4e2fd1e5c41cda6a089a1922d
SHA512

42c8c19bba6c0f8fefbf6b17948bfe4d9b6495c6c4899b51c5d9b2bc412aa26d8ebee4a2a8df992b65451c29c305f112f34a6b38aeb892630912ff28c0eba53d
SSDEEP

12288:7J84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4j:7F7WXbqdUTmWK29ZY47EiLMYTHyN

Score

7^/10

Malware Config

Targets

- Target
  
  6b41e016cfd466fe6e77f7513115f0079ce56fc4e2fd1e5c41cda6a089a1922d
- Size
  
  1.1MB
- MD5
  
  f1743f768dafa698af93ad9fa3b581d9
- SHA1
  
  f86e3904029ed1169022f469c42c26978267c8d8
- SHA256
  
  6b41e016cfd466fe6e77f7513115f0079ce56fc4e2fd1e5c41cda6a089a1922d
- SHA512
  
  42c8c19bba6c0f8fefbf6b17948bfe4d9b6495c6c4899b51c5d9b2bc412aa26d8ebee4a2a8df992b65451c29c305f112f34a6b38aeb892630912ff28c0eba53d
- SSDEEP
  
  12288:7J84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4j:7F7WXbqdUTmWK29ZY47EiLMYTHyN
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2