5fe199ab9b3a61882c2f22ce63bb03d3af0943c37777341a3b0bf2c796395cd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fe199ab9b3a61882c2f22ce63bb03d3af0943c37777341a3b0bf2c796395cd8
Size

1.3MB
Sample

221127-q8dncscc64
MD5

5d765b877ac1aeceb484334e0829de9e
SHA1

a678c5389e974c4374ee6c878f99cc96b4f22a72
SHA256

5fe199ab9b3a61882c2f22ce63bb03d3af0943c37777341a3b0bf2c796395cd8
SHA512

1c12c1b916bdebeff2bf02729ef9b5ce9e4b0b5f27f0a321eb3e830ca597299203995561975c4f84759b972ce5606b6ef57a494d77a742df7b29ca92fde540f4
SSDEEP

24576:jK6fxaOhc2dC3Rfzy41rWibAiCEydknBds0a0m1lK8:m6JpC3RLy41aibAiCE1Ps0a1LK

Score

7^/10

Malware Config

Targets

- Target
  
  5fe199ab9b3a61882c2f22ce63bb03d3af0943c37777341a3b0bf2c796395cd8
- Size
  
  1.3MB
- MD5
  
  5d765b877ac1aeceb484334e0829de9e
- SHA1
  
  a678c5389e974c4374ee6c878f99cc96b4f22a72
- SHA256
  
  5fe199ab9b3a61882c2f22ce63bb03d3af0943c37777341a3b0bf2c796395cd8
- SHA512
  
  1c12c1b916bdebeff2bf02729ef9b5ce9e4b0b5f27f0a321eb3e830ca597299203995561975c4f84759b972ce5606b6ef57a494d77a742df7b29ca92fde540f4
- SSDEEP
  
  24576:jK6fxaOhc2dC3Rfzy41rWibAiCEydknBds0a0m1lK8:m6JpC3RLy41aibAiCE1Ps0a1LK
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2